General
- Target 2026-07-09_eead05a05ea619a55f98c868dd622ba1_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260709-xd1mzagy4y
- SHA256 f3d4e7ef2ae81b360d7181527bcdc3e828b7031fdbcf534a3311747e560a9d85
- MD5 eead05a05ea619a55f98c868dd622ba1
- SHA1 5144e803f9fa62b3e7a89f45873ab9a7b7a9a352
- SHA512 a269f7c8b010f7e89c43411210426a820b5547c076a63ea4740e02c07a03493a68af325eb0c316a398cd294c1a8b4e1eaa31a0350a5121ed7252e31a98ad95a3
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bz1:qfBQGH6SfYoAX+U4F
- TLSH T1445401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_eead05a05ea619a55f98c868dd622ba1_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_eead05a05ea619a55f98c868dd622ba1_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 f3d4e7ef2ae81b360d7181527bcdc3e828b7031fdbcf534a3311747e560a9d85
- MD5 eead05a05ea619a55f98c868dd622ba1
- SHA1 5144e803f9fa62b3e7a89f45873ab9a7b7a9a352
- SHA512 a269f7c8b010f7e89c43411210426a820b5547c076a63ea4740e02c07a03493a68af325eb0c316a398cd294c1a8b4e1eaa31a0350a5121ed7252e31a98ad95a3
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTcoAXjiU4bz1:qfBQGH6SfYoAX+U4F
- TLSH T1445401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.