General
- Target 2026-07-17_2522f5d3dc98ad1c1027d916ccb6e7a9_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260718-e6jaaagv3p
- SHA256 edcd55200509e7a6efc501850795d61a1030724594975f69bd5f0280191cd293
- MD5 2522f5d3dc98ad1c1027d916ccb6e7a9
- SHA1 53058347ca5d0c743088ac2e864114914e4f8fc6
- SHA512 058d7c010c62050c383718a757416282dd08a1ab3f87a038816480c7f1114ad5729dd71259166013434322999db7bc7ab52cda9d11e362bd7a264f8a7991a04d
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:qfBQGH6SfxoAX+U49
- TLSH T14A5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_2522f5d3dc98ad1c1027d916ccb6e7a9_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2522f5d3dc98ad1c1027d916ccb6e7a9_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 edcd55200509e7a6efc501850795d61a1030724594975f69bd5f0280191cd293
- MD5 2522f5d3dc98ad1c1027d916ccb6e7a9
- SHA1 53058347ca5d0c743088ac2e864114914e4f8fc6
- SHA512 058d7c010c62050c383718a757416282dd08a1ab3f87a038816480c7f1114ad5729dd71259166013434322999db7bc7ab52cda9d11e362bd7a264f8a7991a04d
- SSDEEP 6144:tFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:qfBQGH6SfxoAX+U49
- TLSH T14A5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.