General
- Target 2026-07-05_fa9184d9970203abf6f680a96dcebcde_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260705-fbc1fsc18m
- SHA256 d753716892f2831486e781e652929c99f08f3ccdcd2225aa9c9bb3375274599f
- MD5 fa9184d9970203abf6f680a96dcebcde
- SHA1 94534c83df1597be81c4112880db31ee1ceb763c
- SHA512 99f401d6e5de88f74c4201235cb5ea08169fb8bed4d0af539bc4dda5d0f2462cb497f182cee453a4cc8f1ac02faf712f0d9972ba6639215993acdd644f8c6396
- SSDEEP 6144:bFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzB:kfBQGH6Sf0oAX+U4x
- TLSH T16054F1453DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_fa9184d9970203abf6f680a96dcebcde_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_fa9184d9970203abf6f680a96dcebcde_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 d753716892f2831486e781e652929c99f08f3ccdcd2225aa9c9bb3375274599f
- MD5 fa9184d9970203abf6f680a96dcebcde
- SHA1 94534c83df1597be81c4112880db31ee1ceb763c
- SHA512 99f401d6e5de88f74c4201235cb5ea08169fb8bed4d0af539bc4dda5d0f2462cb497f182cee453a4cc8f1ac02faf712f0d9972ba6639215993acdd644f8c6396
- SSDEEP 6144:bFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzB:kfBQGH6Sf0oAX+U4x
- TLSH T16054F1453DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.