General
- Target 2026-07-14_bb5d79f7ea4c10a76e49969a3e3e2e25_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- Sample260714-3eaqtsft6m
- SHA256 5bdcefb5f21f0fdc232a8adedbf8e93bedad4d6e0ef5a05266c3d11b01bfb5ef
- MD5 bb5d79f7ea4c10a76e49969a3e3e2e25
- SHA1 666aac581dda06c4a13ab0093bacee29288debd2
- SHA512 8035e78658913fc519ecb300f697b1a4b4beeee273b6446b0f419faf55a77b5fd2fe40aa634e652d4c480733018edf0d952e2fd3de3415d980f5faf4c050b704
- SSDEEP 49152:JFUcx88PWPOpX0Speom5zMelxDxQTgxft0ArEAjQHyG:J+K88uPCHo9zMAxDxQTgxft0XxyG
- TLSH T1EDB51206B35194E2D1A10F746C6587D29A32BC79BB510EE33EC8331E5C76BC49F26B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_bb5d79f7ea4c10a76e49969a3e3e2e25_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_bb5d79f7ea4c10a76e49969a3e3e2e25_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_bb5d79f7ea4c10a76e49969a3e3e2e25_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- SHA256 5bdcefb5f21f0fdc232a8adedbf8e93bedad4d6e0ef5a05266c3d11b01bfb5ef
- MD5 bb5d79f7ea4c10a76e49969a3e3e2e25
- SHA1 666aac581dda06c4a13ab0093bacee29288debd2
- SHA512 8035e78658913fc519ecb300f697b1a4b4beeee273b6446b0f419faf55a77b5fd2fe40aa634e652d4c480733018edf0d952e2fd3de3415d980f5faf4c050b704
- SSDEEP 49152:JFUcx88PWPOpX0Speom5zMelxDxQTgxft0ArEAjQHyG:J+K88uPCHo9zMAxDxQTgxft0XxyG
- TLSH T1EDB51206B35194E2D1A10F746C6587D29A32BC79BB510EE33EC8331E5C76BC49F26B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE