General
- Target 2026-07-20_806875a514c88036fd6b9ebcd3ec1e1c_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260720-jkq58ads2s
- SHA256 8fa45b00ef6ec2fea896020d5e919b1eb00b423524f3d439408686371730ae3b
- MD5 806875a514c88036fd6b9ebcd3ec1e1c
- SHA1 55bac3c3a2eae51cce06b13a2f7bb62a9c7917a7
- SHA512 0aabafc1930258ddab3075d6088317a38bb519bb0901f84972ec40e8f97f24d258a00b087b64185449a569cf0b8d8d1fbd00f69fc2005fd49497f7ae389b86f8
- SSDEEP 6144:5FlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:OfBQGH6Sf9oAX+U4
- TLSH T1D55402457D93C4B3D0414D3188E68BE15B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_806875a514c88036fd6b9ebcd3ec1e1c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_806875a514c88036fd6b9ebcd3ec1e1c_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 8fa45b00ef6ec2fea896020d5e919b1eb00b423524f3d439408686371730ae3b
- MD5 806875a514c88036fd6b9ebcd3ec1e1c
- SHA1 55bac3c3a2eae51cce06b13a2f7bb62a9c7917a7
- SHA512 0aabafc1930258ddab3075d6088317a38bb519bb0901f84972ec40e8f97f24d258a00b087b64185449a569cf0b8d8d1fbd00f69fc2005fd49497f7ae389b86f8
- SSDEEP 6144:5FlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:OfBQGH6Sf9oAX+U4
- TLSH T1D55402457D93C4B3D0414D3188E68BE15B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.