General
- Target 2026-07-20_45cecb2a3e44af56c3ebb4d0b0c98ccd_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260720-wecrvsbz4v
- SHA256 bcfcc834ffce1f18dc5fd45ec5d38f27f88a06cf5095c3de72b63e5621e5b186
- MD5 45cecb2a3e44af56c3ebb4d0b0c98ccd
- SHA1 afc5bd3347097df21c6cd9d5cf703579af0b720e
- SHA512 af152916502e16d3b5c98879c4b7c342dbde081b9275d441b5ad9e51d2da25dfae83f3230c62d2f4ee79e506a65ce73558bc8f2144f8a7a283d77adebd858f8f
- SSDEEP 6144:4FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:PfBQGH6SfuoAX+U41
- TLSH T1065402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_45cecb2a3e44af56c3ebb4d0b0c98ccd_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_45cecb2a3e44af56c3ebb4d0b0c98ccd_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 bcfcc834ffce1f18dc5fd45ec5d38f27f88a06cf5095c3de72b63e5621e5b186
- MD5 45cecb2a3e44af56c3ebb4d0b0c98ccd
- SHA1 afc5bd3347097df21c6cd9d5cf703579af0b720e
- SHA512 af152916502e16d3b5c98879c4b7c342dbde081b9275d441b5ad9e51d2da25dfae83f3230c62d2f4ee79e506a65ce73558bc8f2144f8a7a283d77adebd858f8f
- SSDEEP 6144:4FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:PfBQGH6SfuoAX+U41
- TLSH T1065402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.