urelas | 2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop
Size 511KB
Sample261028-2dtxmsvtht
SHA256 1096aeb4c04ed9654bbf35a61dfcc718887fe60a9e1384e311469234a15191da
MD5 ca364c8986c2f4a4259da2fa350856ef
SHA1 8e31c5e7454a72c8227229489dc88242dce55fd6
SHA512 671da0d8f1c90555a3d53081b60f94b0e2206dab4728fdedb5a7fdcdfc7208bd5595ac3e9f5e1e969c031a66961219e1cb2a2e93317b1050bd35bfab3e6f7254
SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFK:j/D0caF8wvhb43pDbK
TLSH
T176B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan urelas

Malware Config

Signatures

Family: Urelas
Urelas is a trojan targeting card games.
trojan urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop

File Explorer

2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop

.exe 511KB

2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop

IMPHASH 259c91a14650c448e5204ce4716f8fd6
SHA256 1096aeb4c04ed9654bbf35a61dfcc718887fe60a9e1384e311469234a15191da
MD5 ca364c8986c2f4a4259da2fa350856ef
SHA1 8e31c5e7454a72c8227229489dc88242dce55fd6
SHA512 671da0d8f1c90555a3d53081b60f94b0e2206dab4728fdedb5a7fdcdfc7208bd5595ac3e9f5e1e969c031a66961219e1cb2a2e93317b1050bd35bfab3e6f7254
SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFK:j/D0caF8wvhb43pDbK
TLSH
T176B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

lstrlenW FormatMessageW GetCurrentThreadId InterlockedIncrement lstrcmpA lstrlenA GetVersionExA lstrcmpW LoadLibraryA LoadLibraryW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GlobalFlags InterlockedDecrement SetEndOfFile GetCurrentProcess GetModuleHandleA HeapAlloc HeapFree GetStartupInfoW RtlUnwind RaiseException HeapReAlloc GetCurrentProcessId TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle GetFileType GetStartupInfoA VirtualFree VirtualAlloc HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap GetProcAddress TlsFree GlobalFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalAlloc GlobalHandle GlobalUnlock GlobalReAlloc GlobalLock EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc SetLastError HeapSize FreeLibrary WideCharToMultiByte LocalFileTimeToFileTime GetCurrentDirectoryW SystemTimeToFileTime SetFilePointer GetLastError SetFileAttributesW GetFileSizeEx LockResource LoadResource SizeofResource FindResourceW GetModuleHandleW ExitProcess MultiByteToWideChar CreateThread WriteFile CreateFileA GetModuleFileNameA GetTempPathA ReadFile DeviceIoControl CreateFileW GetSystemDirectoryW GetTickCount Sleep CreateEventW CloseHandle OpenEventW DeleteFileW GetFileAttributesW GetTempPathW GetModuleFileNameW FlushFileBuffers GetVersionExW

user32

DestroyMenu TabbedTextOutW DrawTextW DrawTextExW GrayStringW RegisterWindowMessageW WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu GetClientRect PostMessageW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx GetDlgCtrlID CallWindowProcW CopyRect PtInRect GetMenu SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowTextW GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExW CallNextHookEx DispatchMessageW GetKeyState PeekMessageW ValidateRect GetMenuState wsprintfW LoadIconW LoadCursorW RegisterClassExW GetMenuItemID GetMenuItemCount GetSubMenu GetWindowThreadProcessId SendMessageW GetParent ClientToScreen CreateWindowExW DefWindowProcW BeginPaint EndPaint PostQuitMessage SetWindowTextW SetForegroundWindow UnhookWindowsHookEx MessageBoxW EnableWindow GetWindowLongW GetLastActivePopup IsWindowEnabled

advapi32

RegQueryValueExW RegCloseKey RegSetValueExW RegOpenKeyExW

shell32

ShellExecuteW ShellExecuteA

ws2_32

recv send closesocket connect htons inet_addr gethostbyname socket gethostbyaddr htonl WSAStartup WSAGetLastError

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject CreateStdAccessibleObject

gdi32

DeleteDC GetStockObject CreateBitmap GetClipBox SetTextColor SetBkColor DeleteObject SetWindowExtEx ScaleViewportExtEx ExtTextOutW SaveDC RestoreDC SetMapMode ScaleWindowExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape RectVisible GetDeviceCaps PtVisible TextOutW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

oleaut32

VariantClear VariantChangeType VariantInit