General
- Target 2026-06-29_4603f8e917900251c7b628ce7d6707c7_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260630-mac3dscv6w
- SHA256 5a74559d6ace2ae76955289554a12ed7bdd4f2afd08fd6c83fe30687e046a2a4
- MD5 4603f8e917900251c7b628ce7d6707c7
- SHA1 e42eeda770e446e106cd761173bc572a45c124b1
- SHA512 38d1ae3352f1f1353e946ffc23fb249676885c01c9f60feb5f50b4149ce40b3d031f39067ae21171d30f376afdcfb4a11fb5598cb39a1ea6a77930806a52c1f3
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzN:tfBQGH6SfnoAX+U49
- TLSH T15B54F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-29_4603f8e917900251c7b628ce7d6707c7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_4603f8e917900251c7b628ce7d6707c7_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 5a74559d6ace2ae76955289554a12ed7bdd4f2afd08fd6c83fe30687e046a2a4
- MD5 4603f8e917900251c7b628ce7d6707c7
- SHA1 e42eeda770e446e106cd761173bc572a45c124b1
- SHA512 38d1ae3352f1f1353e946ffc23fb249676885c01c9f60feb5f50b4149ce40b3d031f39067ae21171d30f376afdcfb4a11fb5598cb39a1ea6a77930806a52c1f3
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzN:tfBQGH6SfnoAX+U49
- TLSH T15B54F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.