Extracted

• • Target
    2026-11-03_9c2f4b919788d73868368f68907ce104_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 726KB
  • SHA256 cca602890fb66e0849ee2476fb622e7d6b897af475fd8d21b56ab1580d22e03f
  • MD5 9c2f4b919788d73868368f68907ce104
  • SHA1 e620294df1642d08c537a3f06ff51b446ef84720
  • SHA512 0cb366727a737ce545d051cb7b863c840d00429656ee2fe3c96a267cbfd59699a69cbd93fa6d4c6561aa876059fdede224da130c57beac4d97a6df7cd8bb7b57
  • SSDEEP 12288:VuzLi0eGJFuwjllfjJ7niSzy6An1lhXwr5JbWt0bcNIym:VuK0BFuw7jJ7iSz9m1lGr+CbAm
  • TLSH
    T1A9F4E0252680D876E35A0B311511FAF149AAAC3D12E4E18FF7387E7A5C311D36AB724F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojanupx

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2