Extracted

• • Target
    2026-11-09_f9e5e01dfd38f3d38ef70f4156c13dc9_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 727KB
  • SHA256 7044b78d204d10fad324a0c54d0491646438d1733b4893dad386ab7c391dfb6e
  • MD5 f9e5e01dfd38f3d38ef70f4156c13dc9
  • SHA1 7b553da075b247e4d16be7a29cc01b263e35f0d8
  • SHA512 4ef033ac1e61995f2bf8bdc8d51448d0fa830fe5172f04af92deec35744e28cd5756957b4c4bb089c47e11c9dfcef46059eca5c8afae2a49c9ed8281d02f608b
  • SSDEEP 12288:VuzLi0eGJFuwjllfjJ7niSzy6An1lhXwr5JbWt0bcNIyH:VuK0BFuw7jJ7iSz9m1lGr+CbAH
  • TLSH
    T18DF4E0252680D876E35A0B311511FAF109AAAC3D16E4E18FF7387E7A5C311D36AB724F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojanupx

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Custom signature

    UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2