General
- Target 2026-07-09_5fa31f9ae82e34c38c16674ad1a7db73_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260709-vx1qzaev8n
- SHA256 945c138b220175ab650f4e0fa03ea284ea3d38c730f6b22eff7720799eaa4ddd
- MD5 5fa31f9ae82e34c38c16674ad1a7db73
- SHA1 aba064d50f68cf8baaf07472aca213dde8053152
- SHA512 990d558f5504225488de0c4e9fc7795561f5e53667a8ba9ff945af84a1bc04d5c8e140e1038d5b6d03166a2ee1b2a71d9b0a5d7af36042f62a7bce3761301371
- SSDEEP 6144:hFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:2fBQGH6SfioAX+U4
- TLSH T12A6502457DA3D4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_5fa31f9ae82e34c38c16674ad1a7db73_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5fa31f9ae82e34c38c16674ad1a7db73_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 945c138b220175ab650f4e0fa03ea284ea3d38c730f6b22eff7720799eaa4ddd
- MD5 5fa31f9ae82e34c38c16674ad1a7db73
- SHA1 aba064d50f68cf8baaf07472aca213dde8053152
- SHA512 990d558f5504225488de0c4e9fc7795561f5e53667a8ba9ff945af84a1bc04d5c8e140e1038d5b6d03166a2ee1b2a71d9b0a5d7af36042f62a7bce3761301371
- SSDEEP 6144:hFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:2fBQGH6SfioAX+U4
- TLSH T12A6502457DA3D4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.