General

  • Target

    2025-04-03_79edff08b4c5acd81e001446292b905d_amadey_smoke-loader

  • Size

    581KB

  • MD5

    79edff08b4c5acd81e001446292b905d

  • SHA1

    1950177af6fac20e05c39656e0e2beea7684808a

  • SHA256

    f2f1e80dde8e6bab909cae0f8fdbd38cd5a4371bd8ea93b66d135e7030622664

  • SHA512

    a85cc9f0423c1e1a84d09eb770882072a91f0e570599ee935ec8d6ee11513b78dfef83ff357d969086dad296ceef7cf7ae35462630904206b99e0a56c637c4a2

  • SSDEEP

    6144:JajY1oC+/U8Vjlx4kk9HKda4L38c8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQwS:fOlx4kk9HKda4YJoSiQi4kVdcQzjkP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Signatures

  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_79edff08b4c5acd81e001446292b905d_amadey_smoke-loader
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections