General
- Target 2026-07-30_684a96aee1515c9ae316f775d2821f6a_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260730-v48edsda36
- SHA256 e169fcd83fc0616c8e95839867beaae0d4d45df9debff47203bca283b6439a13
- MD5 684a96aee1515c9ae316f775d2821f6a
- SHA1 f2f2818997a5c85e2da985aa1073e3b3d7c1d6d4
- SHA512 fbcf8cdfb701cb085dfa722d9dd2690524d61e5364d6b9e7186de80b13c64c2dd8d29482627388a847d9599fa7883b5c7883aca4ae7aecba9c5af9b6d2724345
- SSDEEP 6144:TFlKgzelZNQSBQGH/CSpWqT8oAXjiU4bzN:8fBQGH6SfYoAX+U49
- TLSH T17E5401917DA2D8B3C0419A3148A6CFA197376D139A65D203FBAD1F4B2F713D49B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_684a96aee1515c9ae316f775d2821f6a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_684a96aee1515c9ae316f775d2821f6a_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 e169fcd83fc0616c8e95839867beaae0d4d45df9debff47203bca283b6439a13
- MD5 684a96aee1515c9ae316f775d2821f6a
- SHA1 f2f2818997a5c85e2da985aa1073e3b3d7c1d6d4
- SHA512 fbcf8cdfb701cb085dfa722d9dd2690524d61e5364d6b9e7186de80b13c64c2dd8d29482627388a847d9599fa7883b5c7883aca4ae7aecba9c5af9b6d2724345
- SSDEEP 6144:TFlKgzelZNQSBQGH/CSpWqT8oAXjiU4bzN:8fBQGH6SfYoAX+U49
- TLSH T17E5401917DA2D8B3C0419A3148A6CFA197376D139A65D203FBAD1F4B2F713D49B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.