General
- Target 2026-07-11_8a9fed8a8f2c7debdf44d7358db46a63_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260711-gkplaaex4w
- SHA256 bec6ea9dcb646f17b5425826f4c51ecc76af22451f5f9d5bcbec799f6eaa2f4e
- MD5 8a9fed8a8f2c7debdf44d7358db46a63
- SHA1 4775e33f834ef21bd8c2a9eaa6d981d7e0a29344
- SHA512 4b5be3be09c79673eadce2451059ecbc6c0ef72fcdc93346affa1b91313206979ae0f68522c03ba881c3503c8ed1f5123cf029812c667574fe8f4615536769a8
- SSDEEP 6144:+FlKgzelZNQSBQGH/CSpWqTroAXjiU4bz:5fBQGH6SfPoAX+U4
- TLSH T1A454F1917EA2D8B3C4429A314CA6CB6197377D179A65D203B7AD1F4B2F713D09B3A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_8a9fed8a8f2c7debdf44d7358db46a63_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_8a9fed8a8f2c7debdf44d7358db46a63_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 bec6ea9dcb646f17b5425826f4c51ecc76af22451f5f9d5bcbec799f6eaa2f4e
- MD5 8a9fed8a8f2c7debdf44d7358db46a63
- SHA1 4775e33f834ef21bd8c2a9eaa6d981d7e0a29344
- SHA512 4b5be3be09c79673eadce2451059ecbc6c0ef72fcdc93346affa1b91313206979ae0f68522c03ba881c3503c8ed1f5123cf029812c667574fe8f4615536769a8
- SSDEEP 6144:+FlKgzelZNQSBQGH/CSpWqTroAXjiU4bz:5fBQGH6SfPoAX+U4
- TLSH T1A454F1917EA2D8B3C4429A314CA6CB6197377D179A65D203B7AD1F4B2F713D09B3A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.