Extracted

• • Target
    2026-11-07_03bc2b46be2818f0a9684d6c1c496ede_amadey_elex_rhadamanthys_smoke-loader_stop
  • Size 785KB
  • SHA256 efd422acd571585fcb8f1ed2fd034ad8faea845f8d49aef07646af63b30192b4
  • MD5 03bc2b46be2818f0a9684d6c1c496ede
  • SHA1 e11c0b1ad6dd77167f5bf1b3ed230f5cb52587c1
  • SHA512 3957d70bfee63c031482e2cc828cecc3545420dfbbfb445f40fe4a5383c63c341955db369d4355de262b25b52bed1e13b6262d3d059fbb37019606ad459df74e
  • SSDEEP 12288:d7dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEgF:d7dLBftJLW5YUWLrkJB0PJgF
  • TLSH
    T1F80501213480C43AF71A07354441EAE44E7ABC7B18D1A65FFB787D36A9321579B3B28E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecutionurelastrojan

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Custom signature

    Detects executables packed with ASPack

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2