Extracted

• • Target

    2025-04-02_a7c6ecf78214e7adce3b18f1f6aa2362_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • MD5

    a7c6ecf78214e7adce3b18f1f6aa2362

  • SHA1

    da17e06ef1115083a6da487fb1009109f1d41e34

  • SHA256

    eaa2713c9b5488852840a8a93dcd9ab9679dc634e59efbbc4790b11df091afbf

  • SHA512

    96fc9218739120348f81ee6b7672844d8f2074cca3b1e0d16cc761edd8ebceb150b7790d0ce5dd4ce6d0b33c0a2aff2e5d6c1a3fdb0be85e152d8039edbb0077

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohz:8IfBoDWoyFblU6hAJQnON

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1