General
- Target 2026-07-02_54c3bbc482d577b6d649f68f3a642bb6_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260702-v9rc3af16p
- SHA256 a7a07cce4f8d048dcd6a25146c5ab2367f183085eebe2721612ffc127c09d86c
- MD5 54c3bbc482d577b6d649f68f3a642bb6
- SHA1 a16b98a2410851702978a2ca87fabf9ba310685f
- SHA512 6db805f602c082b64d0f21b450056165655c32eb80906194bc4e2ecbd3d16f1e84e8144ab8e7800a4d344e123118963e97d6dc6e905b3a27b173b95e94289aca
- SSDEEP 6144:EFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzV:jfBQGH6SfaoAX+U4l
- TLSH T1925402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_54c3bbc482d577b6d649f68f3a642bb6_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_54c3bbc482d577b6d649f68f3a642bb6_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 a7a07cce4f8d048dcd6a25146c5ab2367f183085eebe2721612ffc127c09d86c
- MD5 54c3bbc482d577b6d649f68f3a642bb6
- SHA1 a16b98a2410851702978a2ca87fabf9ba310685f
- SHA512 6db805f602c082b64d0f21b450056165655c32eb80906194bc4e2ecbd3d16f1e84e8144ab8e7800a4d344e123118963e97d6dc6e905b3a27b173b95e94289aca
- SSDEEP 6144:EFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzV:jfBQGH6SfaoAX+U4l
- TLSH T1925402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.