General
- Target 2026-07-11_90f0366ca0875e7dd3b2f34e36d81e0d_elex_rhadamanthys_smoke-loader
- Size 347KB
- Sample260711-gh87xaex2v
- SHA256 a425837d0b8155e96b149637712c9987339cf35e19a406abbe35fa5cbc551080
- MD5 90f0366ca0875e7dd3b2f34e36d81e0d
- SHA1 aa70ac5ec801131a7568473d45a7cee146334630
- SHA512 122c5b98475fe3064aef8776665e9fdaf1b5a88f9803736bac781b41e7a0182374e2fc32029e69842b842eb13629754545d9498dc9173947820e29b877a417c1
- SSDEEP 6144:iFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:lfBQGH6SfG/oAX+U4
- TLSH T1D474D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_90f0366ca0875e7dd3b2f34e36d81e0d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_90f0366ca0875e7dd3b2f34e36d81e0d_elex_rhadamanthys_smoke-loader
- Size 347KB
- SHA256 a425837d0b8155e96b149637712c9987339cf35e19a406abbe35fa5cbc551080
- MD5 90f0366ca0875e7dd3b2f34e36d81e0d
- SHA1 aa70ac5ec801131a7568473d45a7cee146334630
- SHA512 122c5b98475fe3064aef8776665e9fdaf1b5a88f9803736bac781b41e7a0182374e2fc32029e69842b842eb13629754545d9498dc9173947820e29b877a417c1
- SSDEEP 6144:iFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:lfBQGH6SfG/oAX+U4
- TLSH T1D474D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.