General
- Target 2026-08-09_a959b8108c38fab9a1666228d89ddfe4_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- Sample260809-frpzyst1dv
- SHA256 ece03bf0fcd3385795fdf70af9c4a1052a68853860d00295969296b3877c2611
- MD5 a959b8108c38fab9a1666228d89ddfe4
- SHA1 a46e95a02d55af2265eaabee1086f0c179d64212
- SHA512 b19a8a508d201d8d9a05075d855c8d46cdeaaaecaf21d06a195df1a2107adec585dd210aa78c5f7a741d9b76a30e24abe46b2f55888eea36f633743f7f3417f1
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMB9XuEV9zFgbgLUA1Der5+nU:ye+CGeQOh9+VjPpg3BpxPJgbBAY
- TLSH T1DB551553E6518EEAD7890436DF148150972AF12DABFF12B1785C12C8EE53387BF25A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_a959b8108c38fab9a1666228d89ddfe4_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a959b8108c38fab9a1666228d89ddfe4_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a959b8108c38fab9a1666228d89ddfe4_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- SHA256 ece03bf0fcd3385795fdf70af9c4a1052a68853860d00295969296b3877c2611
- MD5 a959b8108c38fab9a1666228d89ddfe4
- SHA1 a46e95a02d55af2265eaabee1086f0c179d64212
- SHA512 b19a8a508d201d8d9a05075d855c8d46cdeaaaecaf21d06a195df1a2107adec585dd210aa78c5f7a741d9b76a30e24abe46b2f55888eea36f633743f7f3417f1
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMB9XuEV9zFgbgLUA1Der5+nU:ye+CGeQOh9+VjPpg3BpxPJgbBAY
- TLSH T1DB551553E6518EEAD7890436DF148150972AF12DABFF12B1785C12C8EE53387BF25A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE