General

  • Target

    2025-04-04_1f01035c9416593a37ef082c83ee4bbc_amadey_rhadamanthys_smoke-loader

  • Size

    461KB

  • Sample

    250404-f9k4qatjw4

  • MD5

    1f01035c9416593a37ef082c83ee4bbc

  • SHA1

    4066b194b99c52dad1a54367a1b2c7d761e467f3

  • SHA256

    b60e72880976381a40581a44490c9f907fb4ef75bc8527a36697f20b6d719164

  • SHA512

    f48e6c1f50c8118e0c9a5ced92ebcac54baf191554fe325a4bb84b0d898ee478c09c147e1b4fa63831a1608bbcf0acfdffe3a4c09ed2001c139852a4d9668384

  • SSDEEP

    6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdm7:LMpASIcWYx2U6hAJQnV

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-04_1f01035c9416593a37ef082c83ee4bbc_amadey_rhadamanthys_smoke-loader

    • Size

      461KB

    • MD5

      1f01035c9416593a37ef082c83ee4bbc

    • SHA1

      4066b194b99c52dad1a54367a1b2c7d761e467f3

    • SHA256

      b60e72880976381a40581a44490c9f907fb4ef75bc8527a36697f20b6d719164

    • SHA512

      f48e6c1f50c8118e0c9a5ced92ebcac54baf191554fe325a4bb84b0d898ee478c09c147e1b4fa63831a1608bbcf0acfdffe3a4c09ed2001c139852a4d9668384

    • SSDEEP

      6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdm7:LMpASIcWYx2U6hAJQnV

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks