General
- Target 2026-07-08_f9c9f18ff09b13ccb82b25b8166a1f36_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260708-tvmkwsct5m
- SHA256 168415dcce9d45544fd312780e3c331cc4d998c066d2c467ddf5f50a49c0f263
- MD5 f9c9f18ff09b13ccb82b25b8166a1f36
- SHA1 ccfbe5b9f4abb7cb4e9ae8195fef611587fc0974
- SHA512 4b949593602ee14f24329bc3e2dfb12deaedc7ca68cd3b977b031c28f5542924bd23f79e96c45114253304025ef1c742adc9e54a26efdc67cf04f4d4e11d3324
- SSDEEP 6144:HFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:YfBQGH6Sf2oAX+U41
- TLSH T1E65401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_f9c9f18ff09b13ccb82b25b8166a1f36_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f9c9f18ff09b13ccb82b25b8166a1f36_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 168415dcce9d45544fd312780e3c331cc4d998c066d2c467ddf5f50a49c0f263
- MD5 f9c9f18ff09b13ccb82b25b8166a1f36
- SHA1 ccfbe5b9f4abb7cb4e9ae8195fef611587fc0974
- SHA512 4b949593602ee14f24329bc3e2dfb12deaedc7ca68cd3b977b031c28f5542924bd23f79e96c45114253304025ef1c742adc9e54a26efdc67cf04f4d4e11d3324
- SSDEEP 6144:HFlKgzelZNQSBQGH/CSpWqTCoAXjiU4bzF:YfBQGH6Sf2oAX+U41
- TLSH T1E65401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.