General
- Target 2026-07-04_7f5067a07f55111eb4594091a4bb9cd5_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260704-ew76nae19p
- SHA256 f6e93e455300c7420e91e7fa3f96e88a0afca2fccde5057e9e6b906273357850
- MD5 7f5067a07f55111eb4594091a4bb9cd5
- SHA1 1876c9a3ce9744abe26d9e3ba1475847226f40b9
- SHA512 2bbdb236329b5517f803b1d548aad0c77a8deb9fd91f141b50892bc6c48a8a3cbf1147e9565b4ff81d280ceb2e5744fea8d97aed5ff3c0e5d2acf5f778839073
- SSDEEP 6144:lFlKgzelZNQSBQGH/CSpWqTJFPSoAXjiU4bz:ifBQGH6SfHSoAX+U4
- TLSH T17165C02166E9CFE1C09F2475DC96B1F44627EE11DC109FDB7E88BE0A38B12A5A93114F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-04_7f5067a07f55111eb4594091a4bb9cd5_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_7f5067a07f55111eb4594091a4bb9cd5_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 f6e93e455300c7420e91e7fa3f96e88a0afca2fccde5057e9e6b906273357850
- MD5 7f5067a07f55111eb4594091a4bb9cd5
- SHA1 1876c9a3ce9744abe26d9e3ba1475847226f40b9
- SHA512 2bbdb236329b5517f803b1d548aad0c77a8deb9fd91f141b50892bc6c48a8a3cbf1147e9565b4ff81d280ceb2e5744fea8d97aed5ff3c0e5d2acf5f778839073
- SSDEEP 6144:lFlKgzelZNQSBQGH/CSpWqTJFPSoAXjiU4bz:ifBQGH6SfHSoAX+U4
- TLSH T17165C02166E9CFE1C09F2475DC96B1F44627EE11DC109FDB7E88BE0A38B12A5A93114F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.