General
- Target 2026-07-09_5a76b2ebedab4390150221ecd4b79f01_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260709-vz2faaft6z
- SHA256 ced92b646a9a539ba26467e1b47893b739e42addd2ceb3e67c3e27ea5ddf9fb0
- MD5 5a76b2ebedab4390150221ecd4b79f01
- SHA1 b6313e8a2ffcbdc07c9a80a43614fd2411d2a516
- SHA512 922309ad892242be4932a904fc0a62eee080008564bbc49e1eda1a9d285025e6c432ef084202eb85c9d498ab2b30ccc17b56adb2534dd2799fbfbde01f69fd72
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:0fBQGH6SfzoAX+U41
- TLSH T1D55402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_5a76b2ebedab4390150221ecd4b79f01_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5a76b2ebedab4390150221ecd4b79f01_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 ced92b646a9a539ba26467e1b47893b739e42addd2ceb3e67c3e27ea5ddf9fb0
- MD5 5a76b2ebedab4390150221ecd4b79f01
- SHA1 b6313e8a2ffcbdc07c9a80a43614fd2411d2a516
- SHA512 922309ad892242be4932a904fc0a62eee080008564bbc49e1eda1a9d285025e6c432ef084202eb85c9d498ab2b30ccc17b56adb2534dd2799fbfbde01f69fd72
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:0fBQGH6SfzoAX+U41
- TLSH T1D55402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.