General
- Target 2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260705-traf6ady81
- SHA256 0af5516f4b89cb1470d87672507f4bedf5cc04e2a379dc3ababe2de0d7f5bfae
- MD5 3269e40ff15378c303a1acf873b41e7f
- SHA1 9cc8a266a2d62949dfb237b3cd4f009a2e27a1d6
- SHA512 28d1e0f34eb1ecf7bcec043e89a53dfcbbf46bbb1931abf11b13582397f2edd4a81cb26949a3cbd69b4c3690f1e20af441e951cc372133e132ced6c2b7fe280f
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzN:qfBQGH6SfRoAX+U49
- TLSH T1355402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 0af5516f4b89cb1470d87672507f4bedf5cc04e2a379dc3ababe2de0d7f5bfae
- MD5 3269e40ff15378c303a1acf873b41e7f
- SHA1 9cc8a266a2d62949dfb237b3cd4f009a2e27a1d6
- SHA512 28d1e0f34eb1ecf7bcec043e89a53dfcbbf46bbb1931abf11b13582397f2edd4a81cb26949a3cbd69b4c3690f1e20af441e951cc372133e132ced6c2b7fe280f
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzN:qfBQGH6SfRoAX+U49
- TLSH T1355402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.