General

  • Target

    2025-04-02_2e9a9f1c407015f74526495af68dc7af_amadey_rhadamanthys_smoke-loader

  • Size

    400KB

  • Sample

    250402-wybnxatqx4

  • MD5

    2e9a9f1c407015f74526495af68dc7af

  • SHA1

    482532090dbf3f7d3afe1c629f15819788ac650b

  • SHA256

    5545361e116b880f0566820348884d476d1a49b7f3252f1ea3809cdf1507ac43

  • SHA512

    a4e96f7c3033f703b23a6a5dd5f57f04a4222d5b6d1ed964a0c0b456b15c3ad44d3466d62fa472c89d44518cff4222ffd74189f924dbc89e56d2fddc14a5a8c0

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-02_2e9a9f1c407015f74526495af68dc7af_amadey_rhadamanthys_smoke-loader

    • Size

      400KB

    • MD5

      2e9a9f1c407015f74526495af68dc7af

    • SHA1

      482532090dbf3f7d3afe1c629f15819788ac650b

    • SHA256

      5545361e116b880f0566820348884d476d1a49b7f3252f1ea3809cdf1507ac43

    • SHA512

      a4e96f7c3033f703b23a6a5dd5f57f04a4222d5b6d1ed964a0c0b456b15c3ad44d3466d62fa472c89d44518cff4222ffd74189f924dbc89e56d2fddc14a5a8c0

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks