Extracted

• • Target
    2026-10-13_e95a15bc2b57270c94572603b1ab16e6_elex_smoke-loader
  • Size 1.5MB
  • SHA256 9100a9f0781dcde5def5d43ef8f3f3b7cd6e52899a5a9c76d92ce51c69060d58
  • MD5 e95a15bc2b57270c94572603b1ab16e6
  • SHA1 2a28534ded6e95c790c4f4ee2871dff1b7e604eb
  • SHA512 b5f5541197add91b44d4703c8632e3e6515fce1d2a713222990f2f74925aba4616d91316defe60adebe120476754533a04f56be8609d0c98b13a6029f0d5b94d
  • SSDEEP 49152:+mgqWDlmt+OCi1NqvNgyhIZ0tFYh1W1rJ/cwcifaE9xWagVGET:kqimt+Ov1eNgyhIZ0tFYh1QrdaE9Uagx
  • TLSH
    T10D757D2936918076D6333A314A4AE2BDF7B5AD704939426797A03E3C2F70583593A37F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojan

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Detects executables built or packed with MPress PE compressor

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2