General
- Target 2026-07-08_0c6e5e9e2c4c60bd3aab96c244f217fc_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260708-xcpt3se18r
- SHA256 534cdbf00c5c700650ebc453544ca8eeee8dfd69aaeff73e922fe1bf06bf8f5b
- MD5 0c6e5e9e2c4c60bd3aab96c244f217fc
- SHA1 6cf5eefee2fa2dc6d3c6e3d41169c54f3e0880c4
- SHA512 90912911df5a33c18d9dc76641f4d43c7820cd8044ec30066ba50ebbf26c103a8a1c0802392d25fdb350ad251651e5d141e9bca378bf24600552f6fc4bb07b53
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:0fBQGH6SfOoAX+U41
- TLSH T10B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_0c6e5e9e2c4c60bd3aab96c244f217fc_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_0c6e5e9e2c4c60bd3aab96c244f217fc_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 534cdbf00c5c700650ebc453544ca8eeee8dfd69aaeff73e922fe1bf06bf8f5b
- MD5 0c6e5e9e2c4c60bd3aab96c244f217fc
- SHA1 6cf5eefee2fa2dc6d3c6e3d41169c54f3e0880c4
- SHA512 90912911df5a33c18d9dc76641f4d43c7820cd8044ec30066ba50ebbf26c103a8a1c0802392d25fdb350ad251651e5d141e9bca378bf24600552f6fc4bb07b53
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:0fBQGH6SfOoAX+U41
- TLSH T10B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.