General
- Target 2026-06-27_b5250366984e99deff58415e00ec59f8_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260629-d799qact7w
- SHA256 a0cdbf06a585fc9d003f2c5e0d5d224d0abbddfc2c2c904f9e2e325364ce6590
- MD5 b5250366984e99deff58415e00ec59f8
- SHA1 48cd467067c04360bf3736d39f72e6b87cabf539
- SHA512 63d3c670a53b59640609e2a2ac50f5cacf26f37726a5334cb5420f8e5013e97bd83bc3c2cb3e8218441584df13c30d7da4850fe00610799b48f633756154b2c1
- SSDEEP 6144:8FlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:bfBQGH6SfzoAX+U41
- TLSH T1035402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_b5250366984e99deff58415e00ec59f8_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b5250366984e99deff58415e00ec59f8_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 a0cdbf06a585fc9d003f2c5e0d5d224d0abbddfc2c2c904f9e2e325364ce6590
- MD5 b5250366984e99deff58415e00ec59f8
- SHA1 48cd467067c04360bf3736d39f72e6b87cabf539
- SHA512 63d3c670a53b59640609e2a2ac50f5cacf26f37726a5334cb5420f8e5013e97bd83bc3c2cb3e8218441584df13c30d7da4850fe00610799b48f633756154b2c1
- SSDEEP 6144:8FlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:bfBQGH6SfzoAX+U41
- TLSH T1035402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.