General
- Target 2026-07-07_21a76a589d3d7f3443ae1e3386ce1e94_amadey_elex_njrat_smoke-loader
- Size 2.3MB
- Sample260707-3ley5af12t
- SHA256 c0ccf27dee44a227ff34390299fcedbbf3c3f9a2cab61f2c099dab3c7096e997
- MD5 21a76a589d3d7f3443ae1e3386ce1e94
- SHA1 b8a07ba30bf80ae5cf7d628c79b24337a5697841
- SHA512 e09e12e24b74cfb68b4308b4ee53a66863077c5284bf0f76a3757265955f8af8dabfaf57296ec8f7a220d0191d72deca5129e336aa09cc46ce6e50bfdd366b9b
- SSDEEP 49152:joa1taC070Uq0PDXod2ksLjklwpLAIZ8cX:joa1taC0g0DEmAl2cM8c
- TLSH T16FB50113FB9195E5C25D05769B508291963AF832AA0B56427ACC131ECF53BCB8F22F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_21a76a589d3d7f3443ae1e3386ce1e94_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_21a76a589d3d7f3443ae1e3386ce1e94_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_21a76a589d3d7f3443ae1e3386ce1e94_amadey_elex_njrat_smoke-loader
- Size 2.3MB
- SHA256 c0ccf27dee44a227ff34390299fcedbbf3c3f9a2cab61f2c099dab3c7096e997
- MD5 21a76a589d3d7f3443ae1e3386ce1e94
- SHA1 b8a07ba30bf80ae5cf7d628c79b24337a5697841
- SHA512 e09e12e24b74cfb68b4308b4ee53a66863077c5284bf0f76a3757265955f8af8dabfaf57296ec8f7a220d0191d72deca5129e336aa09cc46ce6e50bfdd366b9b
- SSDEEP 49152:joa1taC070Uq0PDXod2ksLjklwpLAIZ8cX:joa1taC0g0DEmAl2cM8c
- TLSH T16FB50113FB9195E5C25D05769B508291963AF832AA0B56427ACC131ECF53BCB8F22F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.