Extracted

• • Target
    2026-11-03_3bbf06d4c70060cfa82f617e9a2238a3_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 726KB
  • SHA256 74164072f6ea028c6aefb56ee15396e015dafa388b2c1115cd61d1cc2f7a8376
  • MD5 3bbf06d4c70060cfa82f617e9a2238a3
  • SHA1 bca8b8dc0c244fa02a1a93d710b377be3223e1f2
  • SHA512 6711ce8ab3d26dfa0db417b563a6645f7f35897b01f672fa44d562714cd2b3462f00af341da782bf1ca2cf7fb6fa33fe51bdae73065832c59b57ba42ed5e237c
  • SSDEEP 12288:VuzLi0eGJFuwjllfjJ7niSzy6An1lhXwr5JbWt0bcNIy9:VuK0BFuw7jJ7iSz9m1lGr+CbA9
  • TLSH
    T1B1F4E0252680D876E35A0B311511FAF149AAAC3D12E4E18FF7387E7A5C311D36AB724F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojanupx

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2