General

  • Target

    2025-04-04_a3bde46c08a015dd2233cd6382529a94_amadey_rhadamanthys_smoke-loader

  • Size

    461KB

  • Sample

    250404-gct6sstks8

  • MD5

    a3bde46c08a015dd2233cd6382529a94

  • SHA1

    f4bda18380c9a303ea136f5ac428bf0a7a5cac19

  • SHA256

    44fe6735b6ef6689fc80576d802becc7683a699b1747619f3ff8e65fa7fadab7

  • SHA512

    9e1f297623d53710c5e159f38a80353206bf6eb132592551cf09d5d9c3d48c3f58591af0f3aea79f014bb2c95eace91bb40866c6bd10c6770662f21e05e0898f

  • SSDEEP

    6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmu:LMpASIcWYx2U6hAJQnI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2025-04-04_a3bde46c08a015dd2233cd6382529a94_amadey_rhadamanthys_smoke-loader

    • Size

      461KB

    • MD5

      a3bde46c08a015dd2233cd6382529a94

    • SHA1

      f4bda18380c9a303ea136f5ac428bf0a7a5cac19

    • SHA256

      44fe6735b6ef6689fc80576d802becc7683a699b1747619f3ff8e65fa7fadab7

    • SHA512

      9e1f297623d53710c5e159f38a80353206bf6eb132592551cf09d5d9c3d48c3f58591af0f3aea79f014bb2c95eace91bb40866c6bd10c6770662f21e05e0898f

    • SSDEEP

      6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmu:LMpASIcWYx2U6hAJQnI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks