Extracted

• • Target

    2025-04-03_3e52f7a6bc53d885725e7874ba2ff949_amadey_smoke-loader

  • Size

    464KB

  • MD5

    3e52f7a6bc53d885725e7874ba2ff949

  • SHA1

    7951bbc1fa0cc5247c5d8f3e96dbfa04ad794e62

  • SHA256

    bf16b32466789e15f84f2dd7f3a92719cf8e713c34c11989b3cbc3b8b83faab9

  • SHA512

    d536eceac0ee5b0a92395b28a03286d45caa99ba136ae55f662eeee49876016537dd41f74d816fce2edf536afe3f78c0507025cff0819ce427b6d01118d05ddd

  • SSDEEP

    12288:Y6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1U4:Y6tQCG0UUPzEkTn4AC1+f

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1