General
- Target 2026-06-26_b3b7f16a2ce7a41c11d0f59372c520ac_elex_rhadamanthys_stop
- Size 224KB
- Sample260629-p95mssfx3n
- SHA256 e4f6f4a7dc84ffae46e235391ca1366d3a54f00a26d9ed8c99c85fb34d2919df
- MD5 b3b7f16a2ce7a41c11d0f59372c520ac
- SHA1 500c96c400b810d7266db71eba2cd9b55d233547
- SHA512 fb7ad1cf49251ed661e28e5a1d84a698845af8332d8567fe2b0b8f82612b4bed567b4c09f2624ba2b242513f60207a8d562221559b0ee83e7489683d34a09b4b
- SSDEEP 3072:txv/y9LJ3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBzy:XamlKgzelZNQSBQGH/CSpWqTA
- TLSH T10D24F1453C93C4B3D041497689E58BD18B7F6D03BAA2E15BFB9D0A4B4EB02984BB7361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-26_b3b7f16a2ce7a41c11d0f59372c520ac_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_b3b7f16a2ce7a41c11d0f59372c520ac_elex_rhadamanthys_stop
- Size 224KB
- SHA256 e4f6f4a7dc84ffae46e235391ca1366d3a54f00a26d9ed8c99c85fb34d2919df
- MD5 b3b7f16a2ce7a41c11d0f59372c520ac
- SHA1 500c96c400b810d7266db71eba2cd9b55d233547
- SHA512 fb7ad1cf49251ed661e28e5a1d84a698845af8332d8567fe2b0b8f82612b4bed567b4c09f2624ba2b242513f60207a8d562221559b0ee83e7489683d34a09b4b
- SSDEEP 3072:txv/y9LJ3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBzy:XamlKgzelZNQSBQGH/CSpWqTA
- TLSH T10D24F1453C93C4B3D041497689E58BD18B7F6D03BAA2E15BFB9D0A4B4EB02984BB7361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.