Overview

overview

10

Static

static

10

2026-07-05...er.exe

windows10-2004-x64

10

2026-07-05...er.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 16:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader.exe
  • Size 284KB
  • Sample260705-traf6ady81
  • SHA256 0af5516f4b89cb1470d87672507f4bedf5cc04e2a379dc3ababe2de0d7f5bfae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoverycosmuworm

Malware Config

Signatures

  • Family: Cosmu

    Cosmu is a Windows worm written in C++.

    wormcosmu
  • Detects Cosmu payload 11 IoCs

    Cosmu is a worm written in C++.

  • Enumerates connected drives 3 TTPs 10 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-05_3269e40ff15378c303a1acf873b41e7f_elex_rhadamanthys_smoke-loader.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:1808

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 325KB
        • SHA256 92c3a824b39a9a36b1bc7f3f80d10df00c55e24a615f2156413ad8a6f7f7bdca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 333KB
        • SHA256 498983573868959228a627269ab89ac85bff5462395e97fb8603376b64a458e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 1.5MB
        • SHA256 f157904132a619433465f4788af62903f3743277ab8b28e78d2c322224676303
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 1.5MB
        • SHA256 6c9b736088697905683c6e347b170fbd7c897d23c91b61ddec64b819064a4031
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 1.5MB
        • SHA256 b62315fb8e27371ce152a08b4a832f2aafce8fb275c77d30aabc5eeed90f2bc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RCX51B8.tmp
        • Path C:\Program Files\Google\Chrome\Application\RCX51B8.tmp
        • Size 336KB
        • SHA256 95eb6d46c94b155ebe97013f2b79a2a04228584a3d455d5ae4ef4a985a59d534
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 1.5MB
        • SHA256 ba559e6c493b5c18c61e65fb669c9ff40aa27a0e7b62f2c877b56bb1d53bc9fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 325KB
        • SHA256 b47168e82b5cf063eb85cd4383e5bcdd590f11d581c5c0fb6ea68cb79398521d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 284KB
        • SHA256 cbed6ce43f35de12d8317512355ed7836cde3e34a59699c2e033079b74ddf4ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        crashreporter.exe
        • Path C:\Program Files\Mozilla Firefox\crashreporter.exe
        • Size 1.5MB
        • SHA256 74131c1df99eb660a9f141a2726cf338c5858fd2c0e37dd7ee48f1600e134ff7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        helper.exe
        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe
        • Size 325KB
        • SHA256 f2fa491a115187490ef2678a6bddf3a2092b564a804d5cee1e1fb0501ea8735b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download