General
- Target 2026-07-10_89689aec8018896b7e31e9a78566d0a8_elex_rhadamanthys_smoke-loader
- Size 292KB
- Sample260710-fxqtfadv3n
- SHA256 90d92b3c0e8bc15189a5d8c0f67fdc02d290a3e81ba86fe880de34ed3d5f9238
- MD5 89689aec8018896b7e31e9a78566d0a8
- SHA1 25d21077eaa96b2caf90d1031edd001cb9ab0904
- SHA512 b494855f0f6ecff08c5e42fbb7308031f8cbe87403f5e5d557a97662725692385f9693e5a46fcdd4e7cb4e8cd56e98144c91dd37f767ce80f939543eb61b39b0
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqTSoAXjiU4bzd:JfBQGH6SfOoAX+U4t
- TLSH T15154F2453D53D873E041493189E6CAE14B7F6C1376A2E21BFB981F4B1EF13885AAA271
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_89689aec8018896b7e31e9a78566d0a8_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_89689aec8018896b7e31e9a78566d0a8_elex_rhadamanthys_smoke-loader
- Size 292KB
- SHA256 90d92b3c0e8bc15189a5d8c0f67fdc02d290a3e81ba86fe880de34ed3d5f9238
- MD5 89689aec8018896b7e31e9a78566d0a8
- SHA1 25d21077eaa96b2caf90d1031edd001cb9ab0904
- SHA512 b494855f0f6ecff08c5e42fbb7308031f8cbe87403f5e5d557a97662725692385f9693e5a46fcdd4e7cb4e8cd56e98144c91dd37f767ce80f939543eb61b39b0
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqTSoAXjiU4bzd:JfBQGH6SfOoAX+U4t
- TLSH T15154F2453D53D873E041493189E6CAE14B7F6C1376A2E21BFB981F4B1EF13885AAA271
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.