General
- Target 2026-06-30_26ad2985c620614ba520bed49f4742ab_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260701-gp226sht2z
- SHA256 bf76218029828f6720a4c602e2e594194a021d8925b9cef4955490edae84fb07
- MD5 26ad2985c620614ba520bed49f4742ab
- SHA1 9044e19f813c372c4cc4904ab23e0e75eddc4a81
- SHA512 786afa6275fbeb43c39813d4eeca187d69398f1e777ba2382e0c17dd4a43027c19fbd21eb1caae6e7b40651f17d28b37698622eb7e7bf3586b033322fd81cc48
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:9fBQGH6SfQoAX+U49
- TLSH T14D5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-30_26ad2985c620614ba520bed49f4742ab_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_26ad2985c620614ba520bed49f4742ab_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 bf76218029828f6720a4c602e2e594194a021d8925b9cef4955490edae84fb07
- MD5 26ad2985c620614ba520bed49f4742ab
- SHA1 9044e19f813c372c4cc4904ab23e0e75eddc4a81
- SHA512 786afa6275fbeb43c39813d4eeca187d69398f1e777ba2382e0c17dd4a43027c19fbd21eb1caae6e7b40651f17d28b37698622eb7e7bf3586b033322fd81cc48
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:9fBQGH6SfQoAX+U49
- TLSH T14D5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.