General
- Target 2026-06-30_5c67503c975580dac1e6162550a37261_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260701-fe95csgv8z
- SHA256 63585fe40cf01f2740c3c6068b4552a0733335c4e47a905eda7bf35571353363
- MD5 5c67503c975580dac1e6162550a37261
- SHA1 a62ba7dae98f33d7de787d9fdf1f3f60c74d18a7
- SHA512 3f5b1953547ebf499dfcec1d30ad6886152a295c4d3fda7018d7062584076567ba579763c9715c9c8e831ac36e1903a1e5dc7dc72a205b028c7547f71a165336
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzN:MfBQGH6SfIoAX+U49
- TLSH T14B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_5c67503c975580dac1e6162550a37261_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_5c67503c975580dac1e6162550a37261_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 63585fe40cf01f2740c3c6068b4552a0733335c4e47a905eda7bf35571353363
- MD5 5c67503c975580dac1e6162550a37261
- SHA1 a62ba7dae98f33d7de787d9fdf1f3f60c74d18a7
- SHA512 3f5b1953547ebf499dfcec1d30ad6886152a295c4d3fda7018d7062584076567ba579763c9715c9c8e831ac36e1903a1e5dc7dc72a205b028c7547f71a165336
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzN:MfBQGH6SfIoAX+U49
- TLSH T14B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.