General
- Target 2026-07-08_8f4c9775e25b73dc747b43cc3a02f9be_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260708-vzprgsdv4m
- SHA256 a2fcf41cee2ea09d4ed3e478f205216f510b24d4ddc646cccc35e8a14f28910b
- MD5 8f4c9775e25b73dc747b43cc3a02f9be
- SHA1 d018feb9bf81587b7155dda4debf599951a62069
- SHA512 9858035f08cf9c91a175e79e26adf2a11400bfce8cb2542a5f586c728ce22118ad46d37fba9e441a378c306b030c7dcf15741efd4e548aca3b7a6ab65693b096
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:sfBQGH6SfNoAX+U49
- TLSH T1BB54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_8f4c9775e25b73dc747b43cc3a02f9be_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8f4c9775e25b73dc747b43cc3a02f9be_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 a2fcf41cee2ea09d4ed3e478f205216f510b24d4ddc646cccc35e8a14f28910b
- MD5 8f4c9775e25b73dc747b43cc3a02f9be
- SHA1 d018feb9bf81587b7155dda4debf599951a62069
- SHA512 9858035f08cf9c91a175e79e26adf2a11400bfce8cb2542a5f586c728ce22118ad46d37fba9e441a378c306b030c7dcf15741efd4e548aca3b7a6ab65693b096
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:sfBQGH6SfNoAX+U49
- TLSH T1BB54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.