General
- Target 2026-07-12_92a068359a20623c6e13b5f9608dd2fe_elex_rhadamanthys_smoke-loader
- Size 296KB
- Sample260712-1mmn9ahs2m
- SHA256 3a7e31890fb730baa68b6ae9f3bd2e793ba03f4df730f8bb2461e95abfb1a3e4
- MD5 92a068359a20623c6e13b5f9608dd2fe
- SHA1 a60b983b0a869120767d44e35ba38334392c447d
- SHA512 bb44628fc3c8e59f1d313f704109058bf0322de32df8de148996438f5e02225718da5e190dab3d7512d8a36682a6481a9f29df4c1d4779dddc1fb1cbbaa09d1f
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz1:MfBQGH6SfyoAX+U4F
- TLSH T1EA54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_92a068359a20623c6e13b5f9608dd2fe_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_92a068359a20623c6e13b5f9608dd2fe_elex_rhadamanthys_smoke-loader
- Size 296KB
- SHA256 3a7e31890fb730baa68b6ae9f3bd2e793ba03f4df730f8bb2461e95abfb1a3e4
- MD5 92a068359a20623c6e13b5f9608dd2fe
- SHA1 a60b983b0a869120767d44e35ba38334392c447d
- SHA512 bb44628fc3c8e59f1d313f704109058bf0322de32df8de148996438f5e02225718da5e190dab3d7512d8a36682a6481a9f29df4c1d4779dddc1fb1cbbaa09d1f
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz1:MfBQGH6SfyoAX+U4F
- TLSH T1EA54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.