General
- Target 2026-07-07_91775fa4143dc5ed027560eb0ffc9920_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260707-wknrbabt2z
- SHA256 de7369aabeba52da001b1677f2c7fc84a9f53b994024290788a613e6ea23ae14
- MD5 91775fa4143dc5ed027560eb0ffc9920
- SHA1 e2c5fbcc44c6cf83d9c97843ce7891fadd93a2f5
- SHA512 4cb9005d5ab6ac777e523d8dae34f911aef4dd4e5ae4660548a248b29f5506a408a5ccf7394646882a2d8b21264715a63d45cdb44e5bb3ba848880f57de625e6
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:qfBQGH6SfYoAX+U41
- TLSH T1905401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_91775fa4143dc5ed027560eb0ffc9920_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_91775fa4143dc5ed027560eb0ffc9920_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 de7369aabeba52da001b1677f2c7fc84a9f53b994024290788a613e6ea23ae14
- MD5 91775fa4143dc5ed027560eb0ffc9920
- SHA1 e2c5fbcc44c6cf83d9c97843ce7891fadd93a2f5
- SHA512 4cb9005d5ab6ac777e523d8dae34f911aef4dd4e5ae4660548a248b29f5506a408a5ccf7394646882a2d8b21264715a63d45cdb44e5bb3ba848880f57de625e6
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:qfBQGH6SfYoAX+U41
- TLSH T1905401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.