General

  • Target

    2025-04-03_9afcf980e258e8937b1a40da46ef450a_amadey_smoke-loader

  • Size

    581KB

  • MD5

    9afcf980e258e8937b1a40da46ef450a

  • SHA1

    71a07b8d9767ff5cd75144b2b48e8b1056708be0

  • SHA256

    93b4f3c20a29fe478f45a63066091b522c54bc2d7622f8197a005c77bc575427

  • SHA512

    21d46e1a50f5322bd2d00b1fb204e4da2853bf86256671b222dcdf4d410c84d4cd2c3503a5eed1e92624b058ead51ad0fe3dede3bc91d7cc38bc4b28cd9469c7

  • SSDEEP

    6144:JajY1oC+/U8Vjlx4kk9HKda4L38c8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQwe:fOlx4kk9HKda4YJoSiQi4kVdcQzjkD

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Signatures

  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_9afcf980e258e8937b1a40da46ef450a_amadey_smoke-loader
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections