General
- Target 2026-07-23_96b858bb1eebdf133561ffcb82d33928_elex_rhadamanthys_stop
- Size 336KB
- Sample260723-lynncsbd94
- SHA256 1ae51f62b0dab45d544daf80956c3c0625f87c7e08820606d439ba9bc2a98819
- MD5 96b858bb1eebdf133561ffcb82d33928
- SHA1 fcb0420fd99473713ad7980b9d3b260ca7a77daf
- SHA512 64d14cb097324e787d15752f32394ebfda59e758f68c0f664a14be346e073e1db1d865901e0e5d7bea4cd17b28937cd8e8f9b2b7b463b2c40ac69da52ab1f8e2
- SSDEEP 3072:Bxv/y9LJ3tGXRvjxpkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBwUNRD5b6:ramlTZNQSBQGH/CSpWqTaUjD5
- TLSH T12A74D0423D63C0F3D441493248AB8BA19B3B6C13AAE5D207FB993F4BDE712945B77285
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_96b858bb1eebdf133561ffcb82d33928_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_96b858bb1eebdf133561ffcb82d33928_elex_rhadamanthys_stop
- Size 336KB
- SHA256 1ae51f62b0dab45d544daf80956c3c0625f87c7e08820606d439ba9bc2a98819
- MD5 96b858bb1eebdf133561ffcb82d33928
- SHA1 fcb0420fd99473713ad7980b9d3b260ca7a77daf
- SHA512 64d14cb097324e787d15752f32394ebfda59e758f68c0f664a14be346e073e1db1d865901e0e5d7bea4cd17b28937cd8e8f9b2b7b463b2c40ac69da52ab1f8e2
- SSDEEP 3072:Bxv/y9LJ3tGXRvjxpkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBwUNRD5b6:ramlTZNQSBQGH/CSpWqTaUjD5
- TLSH T12A74D0423D63C0F3D441493248AB8BA19B3B6C13AAE5D207FB993F4BDE712945B77285
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.