General
- Target 2026-07-29_2e3ae68097cdeb65c4a886c2b10613c3_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260729-zxmlkaeh59
- SHA256 8ec94c0cf34778d3b09366e44b87b0840a54c577073c94514f20609b7e4e93ce
- MD5 2e3ae68097cdeb65c4a886c2b10613c3
- SHA1 8b77e4cda60f17afa5502322509d8a75dd0cc104
- SHA512 fc0df952fe955532155c9e1eb8a6d6e97c75ac50edb2b9a0aafeaa6399b242b8c0e83385c91a56d3a6ebdd9f7408745e1beafb9e6be39f8e6476da5447c3da83
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTioAXjiU4bzF:sfBQGH6SfWoAX+U41
- TLSH T1C75401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_2e3ae68097cdeb65c4a886c2b10613c3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2e3ae68097cdeb65c4a886c2b10613c3_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 8ec94c0cf34778d3b09366e44b87b0840a54c577073c94514f20609b7e4e93ce
- MD5 2e3ae68097cdeb65c4a886c2b10613c3
- SHA1 8b77e4cda60f17afa5502322509d8a75dd0cc104
- SHA512 fc0df952fe955532155c9e1eb8a6d6e97c75ac50edb2b9a0aafeaa6399b242b8c0e83385c91a56d3a6ebdd9f7408745e1beafb9e6be39f8e6476da5447c3da83
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTioAXjiU4bzF:sfBQGH6SfWoAX+U41
- TLSH T1C75401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.