General
- Target 2026-07-11_8e910a1b4b25ee45580cb3639bc2a6d0_elex_rhadamanthys_smoke-loader
- Size 292KB
- Sample260711-gjs73scv2k
- SHA256 9914c41b526daf6df4dec4d4923a370e1c2429f39a55896cb678453b4b29b240
- MD5 8e910a1b4b25ee45580cb3639bc2a6d0
- SHA1 1b3269497ad97badaad603a9b11321cf607d18bc
- SHA512 24163855f52afaf43c8e8ee11d82bb5029b170c43f9ce00364009246815283559e1353f328d171e896ed746519a4e237c415f13f9885fd89993f3706e168bd1d
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTjoAXjiU4bz:zfBQGH6Sf/oAX+U4
- TLSH T1B654F19179A2D8B2C48189318CA6CBA197377C179E65D203B7ED3F4F2F713D49B6A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_8e910a1b4b25ee45580cb3639bc2a6d0_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_8e910a1b4b25ee45580cb3639bc2a6d0_elex_rhadamanthys_smoke-loader
- Size 292KB
- SHA256 9914c41b526daf6df4dec4d4923a370e1c2429f39a55896cb678453b4b29b240
- MD5 8e910a1b4b25ee45580cb3639bc2a6d0
- SHA1 1b3269497ad97badaad603a9b11321cf607d18bc
- SHA512 24163855f52afaf43c8e8ee11d82bb5029b170c43f9ce00364009246815283559e1353f328d171e896ed746519a4e237c415f13f9885fd89993f3706e168bd1d
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTjoAXjiU4bz:zfBQGH6Sf/oAX+U4
- TLSH T1B654F19179A2D8B2C48189318CA6CBA197377C179E65D203B7ED3F4F2F713D49B6A201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.