Extracted

• • Target

    2025-04-03_4f7fd13dd800b2cca37b739573ebd100_amadey_smoke-loader

  • Size

    516KB

  • MD5

    4f7fd13dd800b2cca37b739573ebd100

  • SHA1

    1199d9df2ae9d2e67f7c7b27bfada1e3fb3f7348

  • SHA256

    97d4f7720474df2c1a3a93b342e32600926f108f7f2331f35ecbb4992130144b

  • SHA512

    5b0723607ac054e969b8e54c77545033cc1891d547eff414e0a48a936411437e3eb1b5779bc28a71de2cbf041255dc4810bbcb1271ad84dedede43560744a592

  • SSDEEP

    12288:c2PxDgZo3ijniealtYDG7MzZSHJcvEj8dmoS2ud:c2SLi7LT7MifjT

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1