Extracted

• • Target

    2025-04-04_56ce1302f40520f19ed3a83ff2c94db0_amadey_rhadamanthys_smoke-loader

  • Size

    333KB

  • MD5

    56ce1302f40520f19ed3a83ff2c94db0

  • SHA1

    4f982dfeff51f02b7a39e76af4491bfef6f1e303

  • SHA256

    ed38d345e27a67bd75b98b4397a24c557c97e7036a22c0845f7aba8cf4073ca9

  • SHA512

    5cfdaf35537bcd4d4d30c976cbae6d3c0f7b9dd64c96156762f560e4f399f218f08f77f4e6d70696e5659807de39d9f0ccfa3fcb0d2936b7589e6a979f116c16

  • SSDEEP

    3072:NdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDQgJl0x2AEMenKbZisi:Nd7rpL43btmQ58Z27zw39gY2FeZhmzv

  Score

  10^/10

  urelasaspackv2discoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1