General
- Target 2026-07-29_1d241db4c719bde5b3c7a2aa3216a95d_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260729-z4evaswtaz
- SHA256 ae17e7b0f04a3293e6ac1af69fcbc2265f0e7b38d55f3dc0ee70d56a14834e5e
- MD5 1d241db4c719bde5b3c7a2aa3216a95d
- SHA1 0f6ff22d1f91dbf966f39d390dc1187718f5b9e3
- SHA512 f3fe6374471428e83b928a29016b1e78f5438af32580900c0b5e3480eb02840f258c3cbb37a229110bf42fa7bd830b74ba663264af30b4a4b5ae00f812fa04a5
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:MfBQGH6Sf8oAX+U49
- TLSH T1315401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_1d241db4c719bde5b3c7a2aa3216a95d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1d241db4c719bde5b3c7a2aa3216a95d_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 ae17e7b0f04a3293e6ac1af69fcbc2265f0e7b38d55f3dc0ee70d56a14834e5e
- MD5 1d241db4c719bde5b3c7a2aa3216a95d
- SHA1 0f6ff22d1f91dbf966f39d390dc1187718f5b9e3
- SHA512 f3fe6374471428e83b928a29016b1e78f5438af32580900c0b5e3480eb02840f258c3cbb37a229110bf42fa7bd830b74ba663264af30b4a4b5ae00f812fa04a5
- SSDEEP 6144:DFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:MfBQGH6Sf8oAX+U49
- TLSH T1315401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.