General
- Target 2026-07-02_f5c84d76beee31ebbb175c6304e8d154_elex_rhadamanthys_stop
- Size 224KB
- Sample260702-tjxxgset9k
- SHA256 751a98a0d62165ff67f1cf7ce392623ad827cd60002e77bf3daa8374ad4ae4c0
- MD5 f5c84d76beee31ebbb175c6304e8d154
- SHA1 00caf82d22b311211b1fed4320818c4ed2da6e50
- SHA512 5aa7eedc3376795f76458613a81ba4c299a5a14fb1645d928c45a9a6e47b399b23fdae8397f7efb66146cf50fa365c547590a873b1da1c069447e1514b126f03
- SSDEEP 3072:vxv/y9LJ3tGXRvjxCb5NgXDY7uSK4aqTBiA:pamlKgzeYqT5
- TLSH T15E24D0553C53C073E4424976C9E58BD18BBF6D03BAD2D01BFB590B8B4EE12984BB72A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_f5c84d76beee31ebbb175c6304e8d154_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f5c84d76beee31ebbb175c6304e8d154_elex_rhadamanthys_stop
- Size 224KB
- SHA256 751a98a0d62165ff67f1cf7ce392623ad827cd60002e77bf3daa8374ad4ae4c0
- MD5 f5c84d76beee31ebbb175c6304e8d154
- SHA1 00caf82d22b311211b1fed4320818c4ed2da6e50
- SHA512 5aa7eedc3376795f76458613a81ba4c299a5a14fb1645d928c45a9a6e47b399b23fdae8397f7efb66146cf50fa365c547590a873b1da1c069447e1514b126f03
- SSDEEP 3072:vxv/y9LJ3tGXRvjxCb5NgXDY7uSK4aqTBiA:pamlKgzeYqT5
- TLSH T15E24D0553C53C073E4424976C9E58BD18BBF6D03BAD2D01BFB590B8B4EE12984BB72A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.