Extracted

• • Target
    2026-11-02_b2e22eff5d837b2fb2ffce6954baf80e_elex_rhadamanthys_smoke-loader_stop_tofsee
  • Size 464KB
  • SHA256 f041395bfa06b64f298f4b630d3f2bbb1b45ebb28ea3d8e37e092ff3e8b55e95
  • MD5 b2e22eff5d837b2fb2ffce6954baf80e
  • SHA1 be3343f203b42b063c3bd40a0837fdedcb75cc4f
  • SHA512 9f9d567b4708e6a9ca87272404a301aee17bb8fda7f8aa529cb6fd92256cda6fba8ee7435780618e075a1240511652b3f577ff19d5df216fcb1238560158fa18
  • SSDEEP 6144:E9H4y9VOpL/DrRRoSGFPRuDYBzFrY5dRA2AkCMnZi6c/2AS9kFwJAReRHqO:EZF9VOpn7oSG1EcBhs9xAkLZMowO
  • TLSH
    T180A4DF113640C035E36A0B314995FAF049A8AD3915E8E94FF7787E3A5E702939B7B24F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojanupx

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2