Extracted

• • Target

    2025-04-03_0d79e1b3fcdef8a4c689bca5c5766763_amadey_smoke-loader

  • Size

    464KB

  • MD5

    0d79e1b3fcdef8a4c689bca5c5766763

  • SHA1

    3c9637dbccaba724c68d6e259b2f7d14b2b111b9

  • SHA256

    77a725ed3c4a5f8e7d4c307b393961adf63dae6b5c7994d1fa5c8d7853256e09

  • SHA512

    9258cc5e5456147b275334e0bfd083a13d4bd0663eda72bbd8cd8b8168d78bd2bf9a3ccb729a2cbd9c8c3fd9cb10b731dd0e58c2c676ba1d39a760bd61c566b8

  • SSDEEP

    12288:Y6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UG:Y6tQCG0UUPzEkTn4AC1+N

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1