General
- Target 2026-07-09_6ad6df11c3d77fb7c098d9314964d757_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260709-vs31jaet9n
- SHA256 2741d4b1580fa36f262159eb2b566202983c212b40e585dd34d12dd81b1e9b89
- MD5 6ad6df11c3d77fb7c098d9314964d757
- SHA1 1090a37f7df0f524dd3c31286bddd52ed1ec1dc6
- SHA512 15443908fb78d363aac2d81a6412d80ae7fc9345f9d4696e026617e3274125ac43c1cec61918ff9de1de7db2e5b54912c5e80770acdb0381d989a6e6570d52f3
- SSDEEP 6144:OFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:pfBQGH6SfNoAX+U49
- TLSH T15D54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_6ad6df11c3d77fb7c098d9314964d757_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_6ad6df11c3d77fb7c098d9314964d757_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 2741d4b1580fa36f262159eb2b566202983c212b40e585dd34d12dd81b1e9b89
- MD5 6ad6df11c3d77fb7c098d9314964d757
- SHA1 1090a37f7df0f524dd3c31286bddd52ed1ec1dc6
- SHA512 15443908fb78d363aac2d81a6412d80ae7fc9345f9d4696e026617e3274125ac43c1cec61918ff9de1de7db2e5b54912c5e80770acdb0381d989a6e6570d52f3
- SSDEEP 6144:OFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:pfBQGH6SfNoAX+U49
- TLSH T15D54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.