Extracted

• • Target

    2025-04-03_3585a9b04309d2954ae972be591503cf_amadey_smoke-loader

  • Size

    480KB

  • MD5

    3585a9b04309d2954ae972be591503cf

  • SHA1

    b105170a023464484c6774a85a2ec9fc77371610

  • SHA256

    11a14a88658ce0f07f34f1490642089c572e55621d1dd07fec814efbe4215a7b

  • SHA512

    5491987d83a28b4f23681485acb99f7b46ef41d9f29f44bb6dd18447a6893338e23aa221d6979a1a497f902fb98c4edb3abec6fd95081f9400e9688882ac0ba6

  • SSDEEP

    6144:wqXAoQT5Tr9R0HN/3w36EnCYLTcz6MY5NYnE/QhyjxJBErrZAWkPW5oeNtLjpVOr:TQRI/3w36EnCYcFE/iydJai/WZtA

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1