General
- Target 2026-07-30_3c44431f75b03e0b1acdc1cfa23261ef_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260730-wfwlcsdr3y
- SHA256 cdf432354ddb24f97d2e924a6a36cbfb80b1ad8c80ee07ff09f32c79e9218728
- MD5 3c44431f75b03e0b1acdc1cfa23261ef
- SHA1 2c3f1e1db0ca80cdc4894cdc884305261592f2e8
- SHA512 88a0a196b5257a39a8604599647bf1f1fe7546225544847d5da6dd76d019dff90221a81743c6bb59fa9ed3d25dca0e627a440d63aea03b95cbf19a0375cc838c
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTNoAXjiU4bzN:BfBQGH6SfhoAX+U49
- TLSH T1D95401917DA2D8B3C0419A3148A68FA197376D139A65D203BBAD1F4B2F713D49B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_3c44431f75b03e0b1acdc1cfa23261ef_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3c44431f75b03e0b1acdc1cfa23261ef_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 cdf432354ddb24f97d2e924a6a36cbfb80b1ad8c80ee07ff09f32c79e9218728
- MD5 3c44431f75b03e0b1acdc1cfa23261ef
- SHA1 2c3f1e1db0ca80cdc4894cdc884305261592f2e8
- SHA512 88a0a196b5257a39a8604599647bf1f1fe7546225544847d5da6dd76d019dff90221a81743c6bb59fa9ed3d25dca0e627a440d63aea03b95cbf19a0375cc838c
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTNoAXjiU4bzN:BfBQGH6SfhoAX+U49
- TLSH T1D95401917DA2D8B3C0419A3148A68FA197376D139A65D203BBAD1F4B2F713D49B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.