General

  • Target

    2025-04-04_3444aad7609b0c9c41c39deafa16fab6_amadey_rhadamanthys_smoke-loader

  • Size

    461KB

  • Sample

    250404-f5t6tssrz9

  • MD5

    3444aad7609b0c9c41c39deafa16fab6

  • SHA1

    a41ae6e5268dad024d5217ce5cd0e1cbcd3e813e

  • SHA256

    eebdf5175db16b6691617037b074bf33ce4df24c009ca44097c0e9c793a72326

  • SHA512

    2728149fa608970cde0627ed988d14b3c50c8335dff12852419517ffce179789aeaa432e92cf3d56030699f5c3d24cf3d587b32a1e0c8e681b1eb95a3efea627

  • SSDEEP

    6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmH:LMpASIcWYx2U6hAJQnh

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-04_3444aad7609b0c9c41c39deafa16fab6_amadey_rhadamanthys_smoke-loader

    • Size

      461KB

    • MD5

      3444aad7609b0c9c41c39deafa16fab6

    • SHA1

      a41ae6e5268dad024d5217ce5cd0e1cbcd3e813e

    • SHA256

      eebdf5175db16b6691617037b074bf33ce4df24c009ca44097c0e9c793a72326

    • SHA512

      2728149fa608970cde0627ed988d14b3c50c8335dff12852419517ffce179789aeaa432e92cf3d56030699f5c3d24cf3d587b32a1e0c8e681b1eb95a3efea627

    • SSDEEP

      6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmH:LMpASIcWYx2U6hAJQnh

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks