General
- Target 2026-06-30_723de8af2e4a1a440c8dd32bc787cb90_elex_rhadamanthys_stop
- Size 224KB
- Sample260701-ezezaaes6l
- SHA256 0218da65206a10fcaf433ea712f8fde10ff606841b2a16466f7567f71b819c99
- MD5 723de8af2e4a1a440c8dd32bc787cb90
- SHA1 18f749f88f3a7e4715b9284c12be0360aa24cfb2
- SHA512 521c25678c0bf061e7a5237cf72c3ac14b2bb4f7a1d730c21303e19617c4f87668e72a61e15d9edf80d22646268dbd2d4395462a10250ad0a8d33cbcfcaa1e02
- SSDEEP 3072:fxv/y9LJ3tGXRvjxCb5NgXDY7uSK4aqTBqZgmQDi:5amlKgzeYqTLmQ+
- TLSH T13A24D0017D73C073E4414975C9A68BD1AB7F6C03B9D2D01BFB580A8B5EF12948AB73A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_723de8af2e4a1a440c8dd32bc787cb90_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_723de8af2e4a1a440c8dd32bc787cb90_elex_rhadamanthys_stop
- Size 224KB
- SHA256 0218da65206a10fcaf433ea712f8fde10ff606841b2a16466f7567f71b819c99
- MD5 723de8af2e4a1a440c8dd32bc787cb90
- SHA1 18f749f88f3a7e4715b9284c12be0360aa24cfb2
- SHA512 521c25678c0bf061e7a5237cf72c3ac14b2bb4f7a1d730c21303e19617c4f87668e72a61e15d9edf80d22646268dbd2d4395462a10250ad0a8d33cbcfcaa1e02
- SSDEEP 3072:fxv/y9LJ3tGXRvjxCb5NgXDY7uSK4aqTBqZgmQDi:5amlKgzeYqTLmQ+
- TLSH T13A24D0017D73C073E4414975C9A68BD1AB7F6C03B9D2D01BFB580A8B5EF12948AB73A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.