General
- Target 2026-07-20_8410579718e67b9007b5e95ecd740895_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260720-levbssfx6z
- SHA256 04f9dd31507a5b36169f7c5fdf79bca124e5763d3f3aeb48243b570e08725db8
- MD5 8410579718e67b9007b5e95ecd740895
- SHA1 15e245a65d43bc626ffb846ab64ba7f727f1525b
- SHA512 65a4456ecb1513fb5641c781d0ec1cdcf3f14fb66ff22023e91a46ebc63ed3b266f8ecfb8fccf5c64c0563474392eaca4b0e424c19c88ee377f02cf03772c68c
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzd:EfBQGH6SfcoAX+U4t
- TLSH T1EA5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_8410579718e67b9007b5e95ecd740895_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_8410579718e67b9007b5e95ecd740895_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 04f9dd31507a5b36169f7c5fdf79bca124e5763d3f3aeb48243b570e08725db8
- MD5 8410579718e67b9007b5e95ecd740895
- SHA1 15e245a65d43bc626ffb846ab64ba7f727f1525b
- SHA512 65a4456ecb1513fb5641c781d0ec1cdcf3f14fb66ff22023e91a46ebc63ed3b266f8ecfb8fccf5c64c0563474392eaca4b0e424c19c88ee377f02cf03772c68c
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzd:EfBQGH6SfcoAX+U4t
- TLSH T1EA5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7A301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.