General
- Target 2026-07-08_821fffbe2ea02e0d82554a8d5d0d95a9_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260708-v4j2ssdw3r
- SHA256 26aa354d52a798dbbb4a17935bfb5a47ec074006bbc8a1349f278ffccf156299
- MD5 821fffbe2ea02e0d82554a8d5d0d95a9
- SHA1 fe0f06150814970e6cee0ec176d720303bf9f577
- SHA512 d0b831bd0e4316e5d7254d56d2c5e1fe9a5421dcbe985aa9b996b4cc8e1a15ea73dae95c6141e28a95f8001680796f87572949c8f6b9f380bda45c463534031a
- SSDEEP 6144:cFlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:7fBQGH6SfKCBXoAX+U4
- TLSH T17A65CFB27B92C66BD4E7C23DB4458557A7F29B024D139263A7A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_821fffbe2ea02e0d82554a8d5d0d95a9_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_821fffbe2ea02e0d82554a8d5d0d95a9_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 26aa354d52a798dbbb4a17935bfb5a47ec074006bbc8a1349f278ffccf156299
- MD5 821fffbe2ea02e0d82554a8d5d0d95a9
- SHA1 fe0f06150814970e6cee0ec176d720303bf9f577
- SHA512 d0b831bd0e4316e5d7254d56d2c5e1fe9a5421dcbe985aa9b996b4cc8e1a15ea73dae95c6141e28a95f8001680796f87572949c8f6b9f380bda45c463534031a
- SSDEEP 6144:cFlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:7fBQGH6SfKCBXoAX+U4
- TLSH T17A65CFB27B92C66BD4E7C23DB4458557A7F29B024D139263A7A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.