General
- Target 2026-08-09_28b2640b37097a358c2640da5d558630_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- Sample260809-ge2cwsgh98
- SHA256 75302cc98c22940c4a5ed95983fd7a852c92f565165880f4cc47b9976773391b
- MD5 28b2640b37097a358c2640da5d558630
- SHA1 2e52e41c914d88721d3dd8465eb3a335b4ca64cb
- SHA512 8aaf2ed9172a4e04c9ee09fa4e8da9e26310aaa9cd167a50f0d0af5d054c1afe15a3fb31cfbda860e707132e5934dad6b5120295432dcb24c42ee7d58c082f0e
- SSDEEP 24576:ye+CGeQOh9+VjPpg3B0fu/15Pb8DZSyzLhCBAY:qCGeQU9+V9gxr/15Pb8DZ/zFCeY
- TLSH T139551553E6418EEAD7890436DF148150972AF12DABFF12B1785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_28b2640b37097a358c2640da5d558630_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_28b2640b37097a358c2640da5d558630_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_28b2640b37097a358c2640da5d558630_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- SHA256 75302cc98c22940c4a5ed95983fd7a852c92f565165880f4cc47b9976773391b
- MD5 28b2640b37097a358c2640da5d558630
- SHA1 2e52e41c914d88721d3dd8465eb3a335b4ca64cb
- SHA512 8aaf2ed9172a4e04c9ee09fa4e8da9e26310aaa9cd167a50f0d0af5d054c1afe15a3fb31cfbda860e707132e5934dad6b5120295432dcb24c42ee7d58c082f0e
- SSDEEP 24576:ye+CGeQOh9+VjPpg3B0fu/15Pb8DZSyzLhCBAY:qCGeQU9+V9gxr/15Pb8DZ/zFCeY
- TLSH T139551553E6418EEAD7890436DF148150972AF12DABFF12B1785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE