General
- Target 2026-07-09_c224518f0776dab2bd4de9e3de2e24cf_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260709-t2qk5aev61
- SHA256 13c475b2ba574537d6e03c7c324684b638b13b6bcf2ff09b9293e0e1a137000b
- MD5 c224518f0776dab2bd4de9e3de2e24cf
- SHA1 1ae02ebf8b6bf806c934d7bb4e3af1c7e84f7a2c
- SHA512 54e756fe79b2498c0dff361ea8d66b937fa43c147306ae6bb7b0d24a6b0d29466b641cb60c1603e86979acc89a6470c90488bb7ec150ca5511ad22100a098184
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:+fBQGH6SfYoAX+U41
- TLSH T1615401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_c224518f0776dab2bd4de9e3de2e24cf_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_c224518f0776dab2bd4de9e3de2e24cf_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 13c475b2ba574537d6e03c7c324684b638b13b6bcf2ff09b9293e0e1a137000b
- MD5 c224518f0776dab2bd4de9e3de2e24cf
- SHA1 1ae02ebf8b6bf806c934d7bb4e3af1c7e84f7a2c
- SHA512 54e756fe79b2498c0dff361ea8d66b937fa43c147306ae6bb7b0d24a6b0d29466b641cb60c1603e86979acc89a6470c90488bb7ec150ca5511ad22100a098184
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:+fBQGH6SfYoAX+U41
- TLSH T1615401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.