General
- Target 2026-07-23_9c8da2b7bbbf0bdc028ad9f5806add0b_elex_rhadamanthys_smoke-loader
- Size 940KB
- Sample260723-hjsf8ashjd
- SHA256 01ebd8169013b510ed9ea7b1a7bedfc2984460705a50a799decd024e632ab454
- MD5 9c8da2b7bbbf0bdc028ad9f5806add0b
- SHA1 999d4a351f4836ecc99c7964cf5421c620b7ba8e
- SHA512 7d99b54e6e307e8876a534b3136dd20995e414f5230d7f6d684f86f33f63ceafb55ac3f880fefa8438f9d14a5e46aa090ca00da335c7e5f073e390c1a59de774
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqT0FPAoAXjiU4bz:JfBQGH6SfSAoAX+U4
- TLSH T1F825C02162E9CFE1C09F2475DC96B1F45217EE10CD209FDB7E88BE1A39B12A5A93114F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_9c8da2b7bbbf0bdc028ad9f5806add0b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_9c8da2b7bbbf0bdc028ad9f5806add0b_elex_rhadamanthys_smoke-loader
- Size 940KB
- SHA256 01ebd8169013b510ed9ea7b1a7bedfc2984460705a50a799decd024e632ab454
- MD5 9c8da2b7bbbf0bdc028ad9f5806add0b
- SHA1 999d4a351f4836ecc99c7964cf5421c620b7ba8e
- SHA512 7d99b54e6e307e8876a534b3136dd20995e414f5230d7f6d684f86f33f63ceafb55ac3f880fefa8438f9d14a5e46aa090ca00da335c7e5f073e390c1a59de774
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqT0FPAoAXjiU4bz:JfBQGH6SfSAoAX+U4
- TLSH T1F825C02162E9CFE1C09F2475DC96B1F45217EE10CD209FDB7E88BE1A39B12A5A93114F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.