General
- Target 2026-07-28_8f4788ef4bc99c50b05236681295b0f4_elex_rhadamanthys_smoke-loader
- Size 334KB
- Sample260728-dlfszsak2t
- SHA256 4a5b70394dd40b58d0bb03f7fb2b63080e5d3c1ee2dd4ef03fffd2d18872e8e6
- MD5 8f4788ef4bc99c50b05236681295b0f4
- SHA1 ef862bc4e9d1ef9795efe8050f258ac9358cad00
- SHA512 39d1e66e43f77b54aef159fda67ee0d83f3039bd3f38ab3f1195e0c1c664581a98657588a2850a76659f3f7aa69120c34ade8e5eb189c168de074ba034a20c9f
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:vfBQGH6Sf27oAX+U4
- TLSH T1B174E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B4F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_8f4788ef4bc99c50b05236681295b0f4_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_8f4788ef4bc99c50b05236681295b0f4_elex_rhadamanthys_smoke-loader
- Size 334KB
- SHA256 4a5b70394dd40b58d0bb03f7fb2b63080e5d3c1ee2dd4ef03fffd2d18872e8e6
- MD5 8f4788ef4bc99c50b05236681295b0f4
- SHA1 ef862bc4e9d1ef9795efe8050f258ac9358cad00
- SHA512 39d1e66e43f77b54aef159fda67ee0d83f3039bd3f38ab3f1195e0c1c664581a98657588a2850a76659f3f7aa69120c34ade8e5eb189c168de074ba034a20c9f
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:vfBQGH6Sf27oAX+U4
- TLSH T1B174E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B4F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.