General

  • Target

    2025-04-04_1c8db64c5096333fd8611b61772af10b_amadey_rhadamanthys_smoke-loader

  • Size

    440KB

  • Sample

    250404-f4ttnsz1az

  • MD5

    1c8db64c5096333fd8611b61772af10b

  • SHA1

    3626d7e04e9a22eb2f6777c6dde26e87bb1e694d

  • SHA256

    def73dae6c799c93024d3379b1c3e13c9dae016c11727b7b5429db8835a2f2d6

  • SHA512

    2a5c9b840a04ba440d62376b5f83a3a829780013a3e05fd18b561782b975cee81ace9cdbd98bc51a44f7be2910602dbbd754fb53e4f3e6b36d69a8c04971e344

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-04_1c8db64c5096333fd8611b61772af10b_amadey_rhadamanthys_smoke-loader

    • Size

      440KB

    • MD5

      1c8db64c5096333fd8611b61772af10b

    • SHA1

      3626d7e04e9a22eb2f6777c6dde26e87bb1e694d

    • SHA256

      def73dae6c799c93024d3379b1c3e13c9dae016c11727b7b5429db8835a2f2d6

    • SHA512

      2a5c9b840a04ba440d62376b5f83a3a829780013a3e05fd18b561782b975cee81ace9cdbd98bc51a44f7be2910602dbbd754fb53e4f3e6b36d69a8c04971e344

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks