General
- Target 2026-07-20_284b326e9acd2bfdd073633aa9a8c946_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260720-mbkhvsev5r
- SHA256 f64807ece2951cac2310ef12d8db62b82468533be3f2cb61e737f2dfa9680b9d
- MD5 284b326e9acd2bfdd073633aa9a8c946
- SHA1 be83282a1e432d1d3447f5c1671993a2ca97167f
- SHA512 7b35845bf828e335f62512aad705b2de9676376d214b1856d76074001a27e6ac4c6f7e4149ec61229e456241f3db4ace3b8a84a4bfd110915317e1214a5b84ad
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTjoAXjiU4bzV:CfBQGH6SffoAX+U4l
- TLSH T1E35402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1FB13884BA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_284b326e9acd2bfdd073633aa9a8c946_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_284b326e9acd2bfdd073633aa9a8c946_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 f64807ece2951cac2310ef12d8db62b82468533be3f2cb61e737f2dfa9680b9d
- MD5 284b326e9acd2bfdd073633aa9a8c946
- SHA1 be83282a1e432d1d3447f5c1671993a2ca97167f
- SHA512 7b35845bf828e335f62512aad705b2de9676376d214b1856d76074001a27e6ac4c6f7e4149ec61229e456241f3db4ace3b8a84a4bfd110915317e1214a5b84ad
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTjoAXjiU4bzV:CfBQGH6SffoAX+U4l
- TLSH T1E35402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1FB13884BA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.