General
- Target 2026-07-30_9c8336d0542162e5cd21ca392ac0d62d_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260730-ftr74adj6s
- SHA256 0210e010760ebc55882098c03778376cdf3e68998de4412fef76a594393c0075
- MD5 9c8336d0542162e5cd21ca392ac0d62d
- SHA1 e95acad91bd1a454a53f41d1ff59d201c66ec794
- SHA512 ce84b1315f7c5ff8707d9ebf1d00a3aad0d85323defcefe6db6c389d5b4bff2838cbb5d6a85a6e54529e4877177151624660299016e69dece7cbc2551bd31f17
- SSDEEP 6144:pFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:efBQGH6SfioAX+U4
- TLSH T1B66502457DA3D4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_9c8336d0542162e5cd21ca392ac0d62d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9c8336d0542162e5cd21ca392ac0d62d_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 0210e010760ebc55882098c03778376cdf3e68998de4412fef76a594393c0075
- MD5 9c8336d0542162e5cd21ca392ac0d62d
- SHA1 e95acad91bd1a454a53f41d1ff59d201c66ec794
- SHA512 ce84b1315f7c5ff8707d9ebf1d00a3aad0d85323defcefe6db6c389d5b4bff2838cbb5d6a85a6e54529e4877177151624660299016e69dece7cbc2551bd31f17
- SSDEEP 6144:pFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:efBQGH6SfioAX+U4
- TLSH T1B66502457DA3D4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.