General
- Target 2026-07-10_a12c21dee71ca4e6974793f59004b021_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260710-v31cdsdw2l
- SHA256 efd1846c860395fcd608e7c48c5695e6efb4ad8a6e94ee5f2a0c8d7608b6ba7a
- MD5 a12c21dee71ca4e6974793f59004b021
- SHA1 67a5bd5fbb1567f4360bf04348e7b03884ccb530
- SHA512 a1c20ab4c91c4494ebd07bee3c95c04d41e4f0cdc66b7c42398d4c0478dda13e08955b352876b3b38defbb5a9cc0cf69ca85f8ce5fb753587284692e108cdaf6
- SSDEEP 6144:RFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:GfBQGH6Sf2oAX+U41
- TLSH T1D15401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_a12c21dee71ca4e6974793f59004b021_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_a12c21dee71ca4e6974793f59004b021_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 efd1846c860395fcd608e7c48c5695e6efb4ad8a6e94ee5f2a0c8d7608b6ba7a
- MD5 a12c21dee71ca4e6974793f59004b021
- SHA1 67a5bd5fbb1567f4360bf04348e7b03884ccb530
- SHA512 a1c20ab4c91c4494ebd07bee3c95c04d41e4f0cdc66b7c42398d4c0478dda13e08955b352876b3b38defbb5a9cc0cf69ca85f8ce5fb753587284692e108cdaf6
- SSDEEP 6144:RFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:GfBQGH6Sf2oAX+U41
- TLSH T1D15401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.