General

  • Target

    2025-04-03_4f7fd13dd800b2cca37b739573ebd100_amadey_smoke-loader

  • Size

    516KB

  • MD5

    4f7fd13dd800b2cca37b739573ebd100

  • SHA1

    1199d9df2ae9d2e67f7c7b27bfada1e3fb3f7348

  • SHA256

    97d4f7720474df2c1a3a93b342e32600926f108f7f2331f35ecbb4992130144b

  • SHA512

    5b0723607ac054e969b8e54c77545033cc1891d547eff414e0a48a936411437e3eb1b5779bc28a71de2cbf041255dc4810bbcb1271ad84dedede43560744a592

  • SSDEEP

    12288:c2PxDgZo3ijniealtYDG7MzZSHJcvEj8dmoS2ud:c2SLi7LT7MifjT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Signatures

  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_4f7fd13dd800b2cca37b739573ebd100_amadey_smoke-loader
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections