General
- Target 2026-07-20_04fd669d453d4a0484b084b55129af47_elex_rhadamanthys_smoke-loader
- Size 329KB
- Sample260720-mn992shv9y
- SHA256 83d491f6fd0614ab2d9d30062bb53959aaacc718ac40b2aa8c6ce1c88818113b
- MD5 04fd669d453d4a0484b084b55129af47
- SHA1 25413acd0e20108df9245f9244aa9e9d6dc6a6df
- SHA512 35f5c504ea45f7fdbc2827a1f2cc4890cf2c911d513c54462e0d608a9b11e443224e3235b6bd881a1ca9bd8f09d5adf86c81f7ee832eb6fdb7010be7ef54a9a0
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bz:CfBQGH6SfioAX+U4
- TLSH T1C06402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13C84BA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_04fd669d453d4a0484b084b55129af47_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_04fd669d453d4a0484b084b55129af47_elex_rhadamanthys_smoke-loader
- Size 329KB
- SHA256 83d491f6fd0614ab2d9d30062bb53959aaacc718ac40b2aa8c6ce1c88818113b
- MD5 04fd669d453d4a0484b084b55129af47
- SHA1 25413acd0e20108df9245f9244aa9e9d6dc6a6df
- SHA512 35f5c504ea45f7fdbc2827a1f2cc4890cf2c911d513c54462e0d608a9b11e443224e3235b6bd881a1ca9bd8f09d5adf86c81f7ee832eb6fdb7010be7ef54a9a0
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bz:CfBQGH6SfioAX+U4
- TLSH T1C06402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13C84BA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.