General
- Target 2026-07-23_8d02ab8799488a6a382e3c3a7a180198_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260723-hmepjashpf
- SHA256 6d01a3ecd29100e4ec14797a7e5e86231712dd82bb5d3126b1b8f913a9c7f1a4
- MD5 8d02ab8799488a6a382e3c3a7a180198
- SHA1 c3002a3c161a113f77b1e3a23612606a389467dd
- SHA512 8e0a7fb2353f04d37d271b8ab4f2eef088b5f30ef420c62703541cbfbd15cf9d585d4d44d50a7d194f996b5deb8022c48de942bed69095a1f094e1abc39d9a82
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:9fBQGH6SfQoAX+U49
- TLSH T11A5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_8d02ab8799488a6a382e3c3a7a180198_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_8d02ab8799488a6a382e3c3a7a180198_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 6d01a3ecd29100e4ec14797a7e5e86231712dd82bb5d3126b1b8f913a9c7f1a4
- MD5 8d02ab8799488a6a382e3c3a7a180198
- SHA1 c3002a3c161a113f77b1e3a23612606a389467dd
- SHA512 8e0a7fb2353f04d37d271b8ab4f2eef088b5f30ef420c62703541cbfbd15cf9d585d4d44d50a7d194f996b5deb8022c48de942bed69095a1f094e1abc39d9a82
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:9fBQGH6SfQoAX+U49
- TLSH T11A5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.