General
- Target 2026-07-30_df575516b7f748fbdbd5e9f616e32e31_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260730-vc9hdadk8x
- SHA256 5cb2eacc749c332589535075431537361fe0207cac23bc9cd5cdd1b95511df38
- MD5 df575516b7f748fbdbd5e9f616e32e31
- SHA1 7b2b6fb000ea5d019fc6252ad8a1062bbe118b0d
- SHA512 c9d95a4834205b9b0016afd47d63959d34a84a1f493183c899fa9704e3b30432dd397d634d515eceef852e39d40f68201e6025b48343f01aa61b2462cad07ea7
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTYoAXjiU4bz1:dfBQGH6SfUoAX+U4F
- TLSH T1005402457DA3C4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_df575516b7f748fbdbd5e9f616e32e31_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_df575516b7f748fbdbd5e9f616e32e31_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 5cb2eacc749c332589535075431537361fe0207cac23bc9cd5cdd1b95511df38
- MD5 df575516b7f748fbdbd5e9f616e32e31
- SHA1 7b2b6fb000ea5d019fc6252ad8a1062bbe118b0d
- SHA512 c9d95a4834205b9b0016afd47d63959d34a84a1f493183c899fa9704e3b30432dd397d634d515eceef852e39d40f68201e6025b48343f01aa61b2462cad07ea7
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTYoAXjiU4bz1:dfBQGH6SfUoAX+U4F
- TLSH T1005402457DA3C4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.