Extracted

• • Target

    2025-04-02_3eb3656602d5d81d942815125c8144b6_amadey_smoke-loader

  • Size

    480KB

  • MD5

    3eb3656602d5d81d942815125c8144b6

  • SHA1

    8cee9e4db8c9bae715ba86e1c03bded7802d91aa

  • SHA256

    3044e0deeb3ff89daaad87edce4001b8e0e8ee109cb7705ff72f7aa9689531ec

  • SHA512

    02e3ea2e489f79c357bd02172e3f9a8db3c865a4e633c92a1b14e6a9884e5e3094bc594ef53bb855c1e801e922a796d3db50e1c64fb998b4b1ff1ceeaaf54b49

  • SSDEEP

    6144:wqXAoQT5Tr9R0HN/3w36EnCYLTcz6MY5NYnE/QhyjxJBErrZAWkPW5oeNtLjpVOd:TQRI/3w36EnCYcFE/iydJai/WZtW

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1