General
- Target 2026-07-23_aaa3efe44ac742e77e42cb06ed1a8f00_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260723-q2vcjadn71
- SHA256 9632d1661f8f6d4c704894dfb523528e5fa858e2ffe24bcde1e4f85320b36fa0
- MD5 aaa3efe44ac742e77e42cb06ed1a8f00
- SHA1 575b64676825573f782e8a6298fca3a876038117
- SHA512 32af882e03b57611227b5586eed1f0fdcb611e7b335f00ad4d4e127ed1a001c888c02b38d296cd571740c7a34f3acf213ebbb025b5c899dfe65bd82a90b088f6
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:1fBQGH6SfOoAX+U41
- TLSH T1EC5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_aaa3efe44ac742e77e42cb06ed1a8f00_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_aaa3efe44ac742e77e42cb06ed1a8f00_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 9632d1661f8f6d4c704894dfb523528e5fa858e2ffe24bcde1e4f85320b36fa0
- MD5 aaa3efe44ac742e77e42cb06ed1a8f00
- SHA1 575b64676825573f782e8a6298fca3a876038117
- SHA512 32af882e03b57611227b5586eed1f0fdcb611e7b335f00ad4d4e127ed1a001c888c02b38d296cd571740c7a34f3acf213ebbb025b5c899dfe65bd82a90b088f6
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:1fBQGH6SfOoAX+U41
- TLSH T1EC5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.