Extracted

• • Target

    2025-04-03_9afcf980e258e8937b1a40da46ef450a_amadey_smoke-loader

  • Size

    581KB

  • MD5

    9afcf980e258e8937b1a40da46ef450a

  • SHA1

    71a07b8d9767ff5cd75144b2b48e8b1056708be0

  • SHA256

    93b4f3c20a29fe478f45a63066091b522c54bc2d7622f8197a005c77bc575427

  • SHA512

    21d46e1a50f5322bd2d00b1fb204e4da2853bf86256671b222dcdf4d410c84d4cd2c3503a5eed1e92624b058ead51ad0fe3dede3bc91d7cc38bc4b28cd9469c7

  • SSDEEP

    6144:JajY1oC+/U8Vjlx4kk9HKda4L38c8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQwe:fOlx4kk9HKda4YJoSiQi4kVdcQzjkD

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1