General
- Target 2026-07-22_8e0e6baa69173e6023240727b073ad60_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260722-gfkrjadp9s
- SHA256 75da5e04540f51a4e9596bb04d8e2d15de99e5a669b208433f364e2c5e863d0d
- MD5 8e0e6baa69173e6023240727b073ad60
- SHA1 3015494b1c1bb438e54daa05b30d2de155f2cfc8
- SHA512 41bc78cf13c24234851c9743397e58f5d1d6aefa0389af546a210190f7cd2a2f5287ea1a77136f60cafcb9bfa9e07d60d49e020964c52d60dc8a6ae763965347
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:HfBQGH6Sf8oAX+U49
- TLSH T1FC5401917EA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_8e0e6baa69173e6023240727b073ad60_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_8e0e6baa69173e6023240727b073ad60_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 75da5e04540f51a4e9596bb04d8e2d15de99e5a669b208433f364e2c5e863d0d
- MD5 8e0e6baa69173e6023240727b073ad60
- SHA1 3015494b1c1bb438e54daa05b30d2de155f2cfc8
- SHA512 41bc78cf13c24234851c9743397e58f5d1d6aefa0389af546a210190f7cd2a2f5287ea1a77136f60cafcb9bfa9e07d60d49e020964c52d60dc8a6ae763965347
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:HfBQGH6Sf8oAX+U49
- TLSH T1FC5401917EA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.