General
- Target 2026-07-22_82715535928148520462e60e2b2ccb05_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260722-gjbb9sbb23
- SHA256 a5b5d6dfa877d01858c3c621badb0182d147cea22553d874c5b78b73998b508a
- MD5 82715535928148520462e60e2b2ccb05
- SHA1 f4cca55a26b57573c73cc3d446219fbfb39b7cf2
- SHA512 244ff704a3ae6b8ae6fa7c37bf339f378a59b6c6f295fc570417f6431f123227d5af2f260d14d5e560f482f9e30fe738f2a32b4b9e7394fb0bb2636c1b6611ef
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzN:sfBQGH6Sf2oAX+U49
- TLSH T1A55401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_82715535928148520462e60e2b2ccb05_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_82715535928148520462e60e2b2ccb05_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 a5b5d6dfa877d01858c3c621badb0182d147cea22553d874c5b78b73998b508a
- MD5 82715535928148520462e60e2b2ccb05
- SHA1 f4cca55a26b57573c73cc3d446219fbfb39b7cf2
- SHA512 244ff704a3ae6b8ae6fa7c37bf339f378a59b6c6f295fc570417f6431f123227d5af2f260d14d5e560f482f9e30fe738f2a32b4b9e7394fb0bb2636c1b6611ef
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzN:sfBQGH6Sf2oAX+U49
- TLSH T1A55401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.