General

  • Target

    2025-04-04_05b66e0338a21adaafe696ea30df8813_amadey_rhadamanthys_smoke-loader

  • Size

    440KB

  • Sample

    250404-fgljsazxds

  • MD5

    05b66e0338a21adaafe696ea30df8813

  • SHA1

    3d1727a3c91b5390da7316d5ae598be72a0c0687

  • SHA256

    95126a1672128dad1a603d5ecb315ce86d660d5935e0651773bec7a40d238b01

  • SHA512

    92c40dea22407ddc660db1d82ad87bdac2695f315092c67f83cdb9286224ac66d017dca3a11b7d4dec4f5abe8119d04fa27a02798af4c7819eed8585e7ff55c7

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj2:oMpASIcWYx2U6hAJQnP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-04_05b66e0338a21adaafe696ea30df8813_amadey_rhadamanthys_smoke-loader

    • Size

      440KB

    • MD5

      05b66e0338a21adaafe696ea30df8813

    • SHA1

      3d1727a3c91b5390da7316d5ae598be72a0c0687

    • SHA256

      95126a1672128dad1a603d5ecb315ce86d660d5935e0651773bec7a40d238b01

    • SHA512

      92c40dea22407ddc660db1d82ad87bdac2695f315092c67f83cdb9286224ac66d017dca3a11b7d4dec4f5abe8119d04fa27a02798af4c7819eed8585e7ff55c7

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj2:oMpASIcWYx2U6hAJQnP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks