General
- Target 2026-07-31_86e34c33b79eb385f1e1cb2be0079304_elex_rhadamanthys_smoke-loader
- Size 296KB
- Sample260731-gc2wmsde88
- SHA256 7077d477e82f46f7fe58f17d6170dcec331c17731638981d2db4b3e3d9e5fe91
- MD5 86e34c33b79eb385f1e1cb2be0079304
- SHA1 e2fafb30c222368b4641ab01f334662b08faf40a
- SHA512 c5867cc19047e5060a7540c78fb91387274a44364791ab5ab4925500ef5786f82afc9018630fb4a3e82698be3ecca7965a8856a6856f2f6409174abf8489193b
- SSDEEP 6144:ZFlKgzelZNQSBQGH/CSpWqT0oAXjiU4bzB:ufBQGH6SfwoAX+U4x
- TLSH T18454F1453D93C873D0414931CD96CAE15B7E7C13BDA6E11BFB983B4F1EB13888AA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_86e34c33b79eb385f1e1cb2be0079304_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_86e34c33b79eb385f1e1cb2be0079304_elex_rhadamanthys_smoke-loader
- Size 296KB
- SHA256 7077d477e82f46f7fe58f17d6170dcec331c17731638981d2db4b3e3d9e5fe91
- MD5 86e34c33b79eb385f1e1cb2be0079304
- SHA1 e2fafb30c222368b4641ab01f334662b08faf40a
- SHA512 c5867cc19047e5060a7540c78fb91387274a44364791ab5ab4925500ef5786f82afc9018630fb4a3e82698be3ecca7965a8856a6856f2f6409174abf8489193b
- SSDEEP 6144:ZFlKgzelZNQSBQGH/CSpWqT0oAXjiU4bzB:ufBQGH6SfwoAX+U4x
- TLSH T18454F1453D93C873D0414931CD96CAE15B7E7C13BDA6E11BFB983B4F1EB13888AA6261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.