General
- Target 2026-07-11_9204eb019962cd881a1a56e1adeecf1e_elex_rhadamanthys_smoke-loader
- Size 344KB
- Sample260711-gh4bnact8p
- SHA256 8fefe40d84c3b37d925246bb2390671914cefa6e4a737e5d35a7c3672885299e
- MD5 9204eb019962cd881a1a56e1adeecf1e
- SHA1 b7fb87ce8f23549c781a35aab6efa5037fe05db2
- SHA512 0216a74f5126ba612d41a3b30a047103c598de9143eff2060e00fc1d98d46dfebd6cd2e39635b0d12be68200a21e39828bf4c91fd5fccff9ac66dc8b5d354beb
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:zfBQGH6SfG/oAX+U4
- TLSH T1FA74D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_9204eb019962cd881a1a56e1adeecf1e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_9204eb019962cd881a1a56e1adeecf1e_elex_rhadamanthys_smoke-loader
- Size 344KB
- SHA256 8fefe40d84c3b37d925246bb2390671914cefa6e4a737e5d35a7c3672885299e
- MD5 9204eb019962cd881a1a56e1adeecf1e
- SHA1 b7fb87ce8f23549c781a35aab6efa5037fe05db2
- SHA512 0216a74f5126ba612d41a3b30a047103c598de9143eff2060e00fc1d98d46dfebd6cd2e39635b0d12be68200a21e39828bf4c91fd5fccff9ac66dc8b5d354beb
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:zfBQGH6SfG/oAX+U4
- TLSH T1FA74D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.