General
- Target 2026-07-02_97df7bf0d879ac276e147f5fc27f48c6_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260702-vkeyqsfv6l
- SHA256 c06a556d153928b86d73133c5c44baa92496d4e4bddbe105cede53e04bd83eab
- MD5 97df7bf0d879ac276e147f5fc27f48c6
- SHA1 73b25205a6c006b1b38eee62c547bdff703397ec
- SHA512 9ea6a256de37ad61fd978bcf5b585404db710ff3c10d411a96e97bfe1363a909f69c936b2c2499a6272ee17e3ecba458a62a680a127f29a64c49e0d69f99e2a0
- SSDEEP 6144:MFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:LfBQGH6SfOoAX+U41
- TLSH T1B25402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_97df7bf0d879ac276e147f5fc27f48c6_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_97df7bf0d879ac276e147f5fc27f48c6_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 c06a556d153928b86d73133c5c44baa92496d4e4bddbe105cede53e04bd83eab
- MD5 97df7bf0d879ac276e147f5fc27f48c6
- SHA1 73b25205a6c006b1b38eee62c547bdff703397ec
- SHA512 9ea6a256de37ad61fd978bcf5b585404db710ff3c10d411a96e97bfe1363a909f69c936b2c2499a6272ee17e3ecba458a62a680a127f29a64c49e0d69f99e2a0
- SSDEEP 6144:MFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:LfBQGH6SfOoAX+U41
- TLSH T1B25402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.