General
- Target 2026-08-03_92c9be88c63715be9e7f384aeac8cc5e_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- Sample260803-v2lslsthle
- SHA256 a71d5aaefa28971b7b07083dd247382af29d0e356e193f998cbf7e225ccdc282
- MD5 92c9be88c63715be9e7f384aeac8cc5e
- SHA1 5ced8f54aff91d672c2b01cc031742123aac545e
- SHA512 233d096befc569a781d1494027371f47cb9f715a5c024cadc36140e55b15cf599d1e293c9fbf059ffdf1f80c76b8394fab887720308a193b3e917c8e01e3a2f4
- SSDEEP 49152:JFUcx88PWPOpX0Sp7u5DVvjhjRKJeOTgwj4Q9C9gU25zzqkTyG:J+K88uPCH8hjRW0QU5cqkTyG
- TLSH T162B51206F31290F2D5A14E74686682D79A32BC75BF101ED33AC8331E5C76AC49F67B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_92c9be88c63715be9e7f384aeac8cc5e_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_92c9be88c63715be9e7f384aeac8cc5e_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_92c9be88c63715be9e7f384aeac8cc5e_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- SHA256 a71d5aaefa28971b7b07083dd247382af29d0e356e193f998cbf7e225ccdc282
- MD5 92c9be88c63715be9e7f384aeac8cc5e
- SHA1 5ced8f54aff91d672c2b01cc031742123aac545e
- SHA512 233d096befc569a781d1494027371f47cb9f715a5c024cadc36140e55b15cf599d1e293c9fbf059ffdf1f80c76b8394fab887720308a193b3e917c8e01e3a2f4
- SSDEEP 49152:JFUcx88PWPOpX0Sp7u5DVvjhjRKJeOTgwj4Q9C9gU25zzqkTyG:J+K88uPCH8hjRW0QU5cqkTyG
- TLSH T162B51206F31290F2D5A14E74686682D79A32BC75BF101ED33AC8331E5C76AC49F67B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE