General
- Target 2026-07-21_9c60b8df9a1813a159e3beb88ee68e3b_elex_rhadamanthys_smoke-loader
- Size 444KB
- Sample260721-sblc2sdl6v
- SHA256 e06a933a32ff7f5a9688dbc8b805fce4e456215c74528765296877806f86795e
- MD5 9c60b8df9a1813a159e3beb88ee68e3b
- SHA1 c4f7ff49e641a739f5c281da70de91a32ad05a39
- SHA512 69f4bba728cdbac06fd2a3bbb79af9958aec8653e7009dc05e449e4915d3e5af58675325cbd71fdeb2c7b5a1eae9c63330c43ca4692f4379c7ee4f3f645475c4
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTvoAXjiU4bz:tfBQGH6SfboAX+U4
- TLSH T138A4BE5D795F86F2C3059A3D4465CBA1C23AFF02D961B107BBD83B0BEE722C74A25261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_9c60b8df9a1813a159e3beb88ee68e3b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_9c60b8df9a1813a159e3beb88ee68e3b_elex_rhadamanthys_smoke-loader
- Size 444KB
- SHA256 e06a933a32ff7f5a9688dbc8b805fce4e456215c74528765296877806f86795e
- MD5 9c60b8df9a1813a159e3beb88ee68e3b
- SHA1 c4f7ff49e641a739f5c281da70de91a32ad05a39
- SHA512 69f4bba728cdbac06fd2a3bbb79af9958aec8653e7009dc05e449e4915d3e5af58675325cbd71fdeb2c7b5a1eae9c63330c43ca4692f4379c7ee4f3f645475c4
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTvoAXjiU4bz:tfBQGH6SfboAX+U4
- TLSH T138A4BE5D795F86F2C3059A3D4465CBA1C23AFF02D961B107BBD83B0BEE722C74A25261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.