General
- Target 2026-07-10_2f227f24c6f73b1ea0505211ce9ba58d_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260710-wt45naet6p
- SHA256 d038494d8e593fc3ce2d61c1f2337408c89c4246622d6b18cb00537c285fc641
- MD5 2f227f24c6f73b1ea0505211ce9ba58d
- SHA1 30a89c872ae3e628553bb72d7928762d6bf93011
- SHA512 60d4a94da3417044262ee1585dc490bc202975275225315b7ed2614ba289423c09df98ba53f85a2cc4a17b710d4c0cb308f0bf9fa9f04399be1da45880355835
- SSDEEP 6144:GFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:hfBQGH6Sf2oAX+U41
- TLSH T1305401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_2f227f24c6f73b1ea0505211ce9ba58d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_2f227f24c6f73b1ea0505211ce9ba58d_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 d038494d8e593fc3ce2d61c1f2337408c89c4246622d6b18cb00537c285fc641
- MD5 2f227f24c6f73b1ea0505211ce9ba58d
- SHA1 30a89c872ae3e628553bb72d7928762d6bf93011
- SHA512 60d4a94da3417044262ee1585dc490bc202975275225315b7ed2614ba289423c09df98ba53f85a2cc4a17b710d4c0cb308f0bf9fa9f04399be1da45880355835
- SSDEEP 6144:GFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:hfBQGH6Sf2oAX+U41
- TLSH T1305401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.