Extracted

• • Target

    2025-04-03_8cc1d08d9556927b79414967607b3c25_amadey_smoke-loader

  • Size

    516KB

  • MD5

    8cc1d08d9556927b79414967607b3c25

  • SHA1

    35a4a3bcf960fd04f9f6fa60f129a1924af14057

  • SHA256

    c311b047eb52e41145898dfee3aa8db359e847d990fd508d31bf482f9385134a

  • SHA512

    a6abbbdadd4e95906ffec8f5d4a8cb04d0edf3605a4cec334bcc88c916e62815a2846d5c08edbe8b7cb16e0b2f8a3e9ef1a385c30952066f3953b9cd5dbc8e05

  • SSDEEP

    12288:c2PxDgZo3ijniealtYDG7MzZSHJcvEj8dmoS2uZ:c2SLi7LT7MifjP

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1