General
- Target 2026-08-05_083a2d7b3c55741d49e9c1635a996b63_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- Sample260805-cnsd5atxav
- SHA256 0228ad8c546242abcb98d5d03d556aa7eda5678e9fa317459f2a82adb54f45af
- MD5 083a2d7b3c55741d49e9c1635a996b63
- SHA1 af76f98d9a0bf310853ba9e485f9d7c29cceff65
- SHA512 edeeb2e42935c0ccec3f46f4aa771db6dab3b0731f6c4ceefb32a71808eac54cad2bbcfa2d19ab2a5bed8b1f9f512e1bb45d7ab5b2657afcf4a19b83cea1c924
- SSDEEP 49152:JFUcx88PWPOpX0SpC79i1hm2+gvRswMsJjujUcApJ99xyG:J+K88uPCHQJGTvRbm5oyG
- TLSH T1B9B5120AB752D0F2E5A14E34686483D69A327C75BF511AD33EC8330E5C72AD49F67B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_083a2d7b3c55741d49e9c1635a996b63_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_083a2d7b3c55741d49e9c1635a996b63_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_083a2d7b3c55741d49e9c1635a996b63_amadey_elex_njrat_smoke-loader
- Size 2.2MB
- SHA256 0228ad8c546242abcb98d5d03d556aa7eda5678e9fa317459f2a82adb54f45af
- MD5 083a2d7b3c55741d49e9c1635a996b63
- SHA1 af76f98d9a0bf310853ba9e485f9d7c29cceff65
- SHA512 edeeb2e42935c0ccec3f46f4aa771db6dab3b0731f6c4ceefb32a71808eac54cad2bbcfa2d19ab2a5bed8b1f9f512e1bb45d7ab5b2657afcf4a19b83cea1c924
- SSDEEP 49152:JFUcx88PWPOpX0SpC79i1hm2+gvRswMsJjujUcApJ99xyG:J+K88uPCHQJGTvRbm5oyG
- TLSH T1B9B5120AB752D0F2E5A14E34686483D69A327C75BF511AD33EC8330E5C72AD49F67B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE