Extracted

• • Target
    2026-11-09_b56828dcb3c83713d43cf30c668cbb84_coinminer_elex_rhadamanthys_smoke-loader_stop_tofsee
  • Size 661KB
  • SHA256 5fe4fe5f8dcb67a189e79bb1662c213da1dc2b93d28e9262a20a26b3f7bd8295
  • MD5 b56828dcb3c83713d43cf30c668cbb84
  • SHA1 a5060589893d7b280fd0488ddbaaaf0ce8d3524a
  • SHA512 8c653964ccde4d38c73b0996284175439da33d1313d37edb2cd81977585f8a9db347eac58d02bc27dce876f28e161bcc79c65b87969e7ab0bfee9fe50104a1b4
  • SSDEEP 6144:O1xBWeMRygxDLbHxlSBxzJn1REBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDqLR:Ol3MQIDKJzTq+Xxvo0U+d3s/fCX0r
  • TLSH
    T175E4CE253680C476E36A0B315421EAF10D69AD3916E8E58FF3387E765E312D3527B28F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionurelastrojanupx

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Custom signature

    UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2