General
-
Target
2025-04-04_40c30e9a08fa24da8610a9def50e51bd_amadey_smoke-loader
-
Size
790KB
-
Sample
250404-f2v9qazzg1
-
MD5
40c30e9a08fa24da8610a9def50e51bd
-
SHA1
afbcb07801aca53750b920e191a5a910fa76de0f
-
SHA256
c17f935c7a26f36ed26ffe807033054469869841ce7ca49ff08104f7f6f7cce3
-
SHA512
6b2e8530a90fab68e2b7fe9796c7518409841c16a2ca84179124542ca6178174ab716099cb0916d5b14a05d523fea13b18e8516ad6cb4f2a62cefc3fc9d63720
-
SSDEEP
12288:dccNvdRExZGe+Q1nzPAlDqfJZTvfTRTWkI42gqmoWkI094og2GXfJKnbkS3LdAPp:dnPfQpzyD8ZTn8kZ2gqAkI094vOkSCLl
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
2025-04-04_40c30e9a08fa24da8610a9def50e51bd_amadey_smoke-loader
-
Size
790KB
-
MD5
40c30e9a08fa24da8610a9def50e51bd
-
SHA1
afbcb07801aca53750b920e191a5a910fa76de0f
-
SHA256
c17f935c7a26f36ed26ffe807033054469869841ce7ca49ff08104f7f6f7cce3
-
SHA512
6b2e8530a90fab68e2b7fe9796c7518409841c16a2ca84179124542ca6178174ab716099cb0916d5b14a05d523fea13b18e8516ad6cb4f2a62cefc3fc9d63720
-
SSDEEP
12288:dccNvdRExZGe+Q1nzPAlDqfJZTvfTRTWkI42gqmoWkI094og2GXfJKnbkS3LdAPp:dnPfQpzyD8ZTn8kZ2gqAkI094vOkSCLl
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-