General
- Target 2026-07-16_1f0532e2342b674c369ab98d737ad7cf_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260716-1fbneaew6p
- SHA256 02f8dbfea8667151b4645a2e33d3f65f81b16e13c4545e8df649fe7d2fe9d078
- MD5 1f0532e2342b674c369ab98d737ad7cf
- SHA1 13277a4bcde55675f99319c4fae0f3c813a75c99
- SHA512 07d4bb62d19a9d93360920a9de9e3380c7aaf6cba58c33e06f6637f066530a6bc1d5fa93e69eb3e4cf52af143fdb820ac1512cd15b52e35532c2a8a78688250e
- SSDEEP 6144:VFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:yfBQGH6SfOoAX+U41
- TLSH T17A5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-16_1f0532e2342b674c369ab98d737ad7cf_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_1f0532e2342b674c369ab98d737ad7cf_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 02f8dbfea8667151b4645a2e33d3f65f81b16e13c4545e8df649fe7d2fe9d078
- MD5 1f0532e2342b674c369ab98d737ad7cf
- SHA1 13277a4bcde55675f99319c4fae0f3c813a75c99
- SHA512 07d4bb62d19a9d93360920a9de9e3380c7aaf6cba58c33e06f6637f066530a6bc1d5fa93e69eb3e4cf52af143fdb820ac1512cd15b52e35532c2a8a78688250e
- SSDEEP 6144:VFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:yfBQGH6SfOoAX+U41
- TLSH T17A5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.