General
- Target 2026-08-09_c85498eea90e0ea3911928f1c43a71af_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- Sample260809-tfcr5styes
- SHA256 ccb6c0e3987c8c8db456f5075b51061782bb83926eda00f45f85bd38f5118eb9
- MD5 c85498eea90e0ea3911928f1c43a71af
- SHA1 64533ba01557d5635b04e221d873302e1d46aeab
- SHA512 8ffd2f16be19d654cb5628d7f2519feb641c121893497ce64ba11506dda6c56272faaf71b2710c8e82af5d305cfcf97f4f08455af1340f4fc7d0dddfc045c427
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMB8lirNPDsljVyjg4WGCIgLUA1De/:ye+CGeQOh9+VjPpg3B8lir16n4QIBAY
- TLSH T11B551553E6918EEAD7890432DF148150972AF12DABFF1271785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c85498eea90e0ea3911928f1c43a71af_amadey_elex_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_c85498eea90e0ea3911928f1c43a71af_amadey_elex_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c85498eea90e0ea3911928f1c43a71af_amadey_elex_njrat_smoke-loader
- Size 1.3MB
- SHA256 ccb6c0e3987c8c8db456f5075b51061782bb83926eda00f45f85bd38f5118eb9
- MD5 c85498eea90e0ea3911928f1c43a71af
- SHA1 64533ba01557d5635b04e221d873302e1d46aeab
- SHA512 8ffd2f16be19d654cb5628d7f2519feb641c121893497ce64ba11506dda6c56272faaf71b2710c8e82af5d305cfcf97f4f08455af1340f4fc7d0dddfc045c427
- SSDEEP 12288:y3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMB8lirNPDsljVyjg4WGCIgLUA1De/:ye+CGeQOh9+VjPpg3B8lir16n4QIBAY
- TLSH T11B551553E6918EEAD7890432DF148150972AF12DABFF1271785C12C8EE53387BF65A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE