General
- Target 2026-07-09_32864beb116b8a6766adf7b73b86e931_elex_rhadamanthys_smoke-loader
- Size 347KB
- Sample260709-wcb3jsez2q
- SHA256 de5a20ab9cd9c1942cfee6c821503809daf7e8f130cb725ba6b9d891b61b8f55
- MD5 32864beb116b8a6766adf7b73b86e931
- SHA1 5ad6cfc0cdbfaa7a64fbd396449454eb1c77e0c5
- SHA512 50cb8d36cdd6e3baff67d31b74edf61dc7e9a3a9c0fcd67ae64137b2c4ab13e933d14a560b55fd096eb033bdea3ba2ec7ab328b18da1023fb6b040ff9fd1a44c
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:gfBQGH6SfG/oAX+U4
- TLSH T15674D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_32864beb116b8a6766adf7b73b86e931_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_32864beb116b8a6766adf7b73b86e931_elex_rhadamanthys_smoke-loader
- Size 347KB
- SHA256 de5a20ab9cd9c1942cfee6c821503809daf7e8f130cb725ba6b9d891b61b8f55
- MD5 32864beb116b8a6766adf7b73b86e931
- SHA1 5ad6cfc0cdbfaa7a64fbd396449454eb1c77e0c5
- SHA512 50cb8d36cdd6e3baff67d31b74edf61dc7e9a3a9c0fcd67ae64137b2c4ab13e933d14a560b55fd096eb033bdea3ba2ec7ab328b18da1023fb6b040ff9fd1a44c
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:gfBQGH6SfG/oAX+U4
- TLSH T15674D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.