General
- Target 2026-07-21_90c88d78df1447cc5541ca9d47313c97_elex_rhadamanthys_smoke-loader
- Size 333KB
- Sample260721-sdvdqsycrd
- SHA256 9f65088bae74c04f023a0fd064e27b75c94e774f5151996cd016ca7fb174617a
- MD5 90c88d78df1447cc5541ca9d47313c97
- SHA1 70898d4d46e70e6912bfad042a3e7bacf2784097
- SHA512 2a86884960e30f0a4ed23b5dd87b8fa36bd05c55e5220b83e5ad29d8d6d37cfa23c9ccff15d1a804990c50a26e51e69cf86e49c20e33fe8ff9329c2478561938
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:1fBQGH6Sf27oAX+U4
- TLSH T15A74E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_90c88d78df1447cc5541ca9d47313c97_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_90c88d78df1447cc5541ca9d47313c97_elex_rhadamanthys_smoke-loader
- Size 333KB
- SHA256 9f65088bae74c04f023a0fd064e27b75c94e774f5151996cd016ca7fb174617a
- MD5 90c88d78df1447cc5541ca9d47313c97
- SHA1 70898d4d46e70e6912bfad042a3e7bacf2784097
- SHA512 2a86884960e30f0a4ed23b5dd87b8fa36bd05c55e5220b83e5ad29d8d6d37cfa23c9ccff15d1a804990c50a26e51e69cf86e49c20e33fe8ff9329c2478561938
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:1fBQGH6Sf27oAX+U4
- TLSH T15A74E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.