Extracted

• • Target
    2026-11-07_0cddeb9347a63f8196236a241685a5b2_amadey_elex_rhadamanthys_smoke-loader_stop
  • Size 694KB
  • SHA256 76f9e9f6aa37f7624da29353b612ff27c86dc428ad7393eb1e4b75856c8cb036
  • MD5 0cddeb9347a63f8196236a241685a5b2
  • SHA1 78f5e4d26ebb0bc7c669532cd33e9dd5561282ea
  • SHA512 7faaedc58368c48eced746ff1b296532aad37d36ec832f95f7846a70d6d1d74bd822f6eaeed0120fa45f567b8593be977f9250c6d1598240ab7b7a2b59820990
  • SSDEEP 12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nr0:dVh6gl6Iy8R9+ZdnnP94jpgl9Bnr0
  • TLSH
    T16DE4F1216140C038F3AA077689A2E1E51A297DB85790E58FF7E87DB65A311D79B3330F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecutionurelastrojan

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Custom signature

    Detects executables built or packed with MPress PE compressor

  • Custom signature

    Detects executables packed with ASPack

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2