General
- Target 2026-07-20_892a94798bd427402f296599651029b6_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- Sample260720-lcmtyacz4p
- SHA256 fcf9aec7c23a0c01fcdc7e49126b3fdf698eccc38b648f98e508c9c20a2ab52e
- MD5 892a94798bd427402f296599651029b6
- SHA1 5594b897479b4c0230bb0c28117fc18cf9c0e662
- SHA512 c1e07adc50e611f0c7a9d9627d760005a93ed03f9446ff9f64943b71df2e94a6a35c57ca0f58c2cac634fdd3baeb5dd1b47c63e0dc4c0e3959a7c26a4e6cb268
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMBxP9chssflggY52sLrWVgLUA1De/:ye+CGeQOh9+VjPpg3Bh9chdWxkhVBAY
- TLSH T1CC551553E6818EEAD7890436DF148150972AF12DABFF1271785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_892a94798bd427402f296599651029b6_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_892a94798bd427402f296599651029b6_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_892a94798bd427402f296599651029b6_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- SHA256 fcf9aec7c23a0c01fcdc7e49126b3fdf698eccc38b648f98e508c9c20a2ab52e
- MD5 892a94798bd427402f296599651029b6
- SHA1 5594b897479b4c0230bb0c28117fc18cf9c0e662
- SHA512 c1e07adc50e611f0c7a9d9627d760005a93ed03f9446ff9f64943b71df2e94a6a35c57ca0f58c2cac634fdd3baeb5dd1b47c63e0dc4c0e3959a7c26a4e6cb268
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMBxP9chssflggY52sLrWVgLUA1De/:ye+CGeQOh9+VjPpg3Bh9chdWxkhVBAY
- TLSH T1CC551553E6818EEAD7890436DF148150972AF12DABFF1271785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE