General
- Target 2026-08-02_ac79a2db925b5f52138686308ec8dccc_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- Sample260802-q7gcvsbm2w
- SHA256 e98d640018ac1ec8afe0c3758ecdead4feb65dbeadcf6baec953a06e3541bd97
- MD5 ac79a2db925b5f52138686308ec8dccc
- SHA1 a0fb0f9b8bd080a9b0e2a5cfc387d1f9c709fa74
- SHA512 a8392ba8105a7e31553c519e17925676c568e9a5f32dbe77750aca788c4a4ed76b4e7ff4b0243200ea255d43b38344d42251f53463cf01e4f847a9512685fe94
- SSDEEP 24576:ye+CGeQOh9+VjPpg3B/H0YzAP+Jr+KBAY:qCGeQU9+V9gx/UYzw+JrveY
- TLSH T192551553E6818EEAD7890436DF148150972AF12DA7FF1271785C12C8EE93387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_ac79a2db925b5f52138686308ec8dccc_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_ac79a2db925b5f52138686308ec8dccc_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ac79a2db925b5f52138686308ec8dccc_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- SHA256 e98d640018ac1ec8afe0c3758ecdead4feb65dbeadcf6baec953a06e3541bd97
- MD5 ac79a2db925b5f52138686308ec8dccc
- SHA1 a0fb0f9b8bd080a9b0e2a5cfc387d1f9c709fa74
- SHA512 a8392ba8105a7e31553c519e17925676c568e9a5f32dbe77750aca788c4a4ed76b4e7ff4b0243200ea255d43b38344d42251f53463cf01e4f847a9512685fe94
- SSDEEP 24576:ye+CGeQOh9+VjPpg3B/H0YzAP+Jr+KBAY:qCGeQU9+V9gx/UYzw+JrveY
- TLSH T192551553E6818EEAD7890436DF148150972AF12DA7FF1271785C12C8EE93387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE