General
- Target 2026-07-20_93b31f75f1a86f93197af3adad9c2e54_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260720-nkp1daax4v
- SHA256 4f4a396a10fbd0ae35496f3995fba252d28e4b41846d6454ae7e62a8cebe5db5
- MD5 93b31f75f1a86f93197af3adad9c2e54
- SHA1 88252e4f1f112840f7343de9f8d2947452fb884b
- SHA512 13fe4ab19ff32b6c5511268ef9ff047dab1c72d82854cd9a2e7b037f2afd24f8fcfc85d5766b355245011a989bd7b8c118ed676ebc0c0a00de710e4f6da8ee14
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTyoAXjiU4bz:zfBQGH6SfeoAX+U4
- TLSH T13554F1457D93C4B3E0414D31C9E68AE14B7E6C037AA6E11BFF5D0B4B1EB13884BA66B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_93b31f75f1a86f93197af3adad9c2e54_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_93b31f75f1a86f93197af3adad9c2e54_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 4f4a396a10fbd0ae35496f3995fba252d28e4b41846d6454ae7e62a8cebe5db5
- MD5 93b31f75f1a86f93197af3adad9c2e54
- SHA1 88252e4f1f112840f7343de9f8d2947452fb884b
- SHA512 13fe4ab19ff32b6c5511268ef9ff047dab1c72d82854cd9a2e7b037f2afd24f8fcfc85d5766b355245011a989bd7b8c118ed676ebc0c0a00de710e4f6da8ee14
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqTyoAXjiU4bz:zfBQGH6SfeoAX+U4
- TLSH T13554F1457D93C4B3E0414D31C9E68AE14B7E6C037AA6E11BFF5D0B4B1EB13884BA66B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.