General
- Target 2026-07-22_848d8142250773cc52d75c2039f5c2ea_elex_rhadamanthys_smoke-loader
- Size 331KB
- Sample260722-ghqqkaba98
- SHA256 6aecebe60fd2afe1446d10f43a819c04c6b3b01c33e5e5ecd6d00cbcabe220dc
- MD5 848d8142250773cc52d75c2039f5c2ea
- SHA1 764fadd02cf10cbc89eab16c62e0115b48aea6d4
- SHA512 0d51fce5fb646239843122f672e70f60ebebfebc0cad3e2235c46c77ecbe8883b2b6619d8069987621fc83c699566d1c4697c62f24deca4ec3671fdd5468a340
- SSDEEP 6144:NFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:KfBQGH6Sf27oAX+U4
- TLSH T1FA74E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_848d8142250773cc52d75c2039f5c2ea_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_848d8142250773cc52d75c2039f5c2ea_elex_rhadamanthys_smoke-loader
- Size 331KB
- SHA256 6aecebe60fd2afe1446d10f43a819c04c6b3b01c33e5e5ecd6d00cbcabe220dc
- MD5 848d8142250773cc52d75c2039f5c2ea
- SHA1 764fadd02cf10cbc89eab16c62e0115b48aea6d4
- SHA512 0d51fce5fb646239843122f672e70f60ebebfebc0cad3e2235c46c77ecbe8883b2b6619d8069987621fc83c699566d1c4697c62f24deca4ec3671fdd5468a340
- SSDEEP 6144:NFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:KfBQGH6Sf27oAX+U4
- TLSH T1FA74E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.