General
- Target 2026-07-20_8fbe1a9eccdab3db09958baf28feca81_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260720-jjgkdsc151
- SHA256 c09e58126f1c4fb4384d73c38bff9cb1608fd17319f087e847cb32df6f454eb3
- MD5 8fbe1a9eccdab3db09958baf28feca81
- SHA1 7d2a6108a97bfae3318090d8508d97ea9835c4fd
- SHA512 7bb9ead4ce0b5ae8c3e6d1982492738c1864abdf9c4605ce2a092a47333814da702aa4cb6e7c6db640dd21884b4e4031662178696e49165186b77045aded8e41
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzd:zfBQGH6SfcoAX+U4t
- TLSH T1F75401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_8fbe1a9eccdab3db09958baf28feca81_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_8fbe1a9eccdab3db09958baf28feca81_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 c09e58126f1c4fb4384d73c38bff9cb1608fd17319f087e847cb32df6f454eb3
- MD5 8fbe1a9eccdab3db09958baf28feca81
- SHA1 7d2a6108a97bfae3318090d8508d97ea9835c4fd
- SHA512 7bb9ead4ce0b5ae8c3e6d1982492738c1864abdf9c4605ce2a092a47333814da702aa4cb6e7c6db640dd21884b4e4031662178696e49165186b77045aded8e41
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzd:zfBQGH6SfcoAX+U4t
- TLSH T1F75401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.