General
- Target 2026-08-01_ca9846d94a1ec129c703193a60a94c34_elex_rhadamanthys_smoke-loader
- Size 652KB
- Sample260801-p2j15aztes
- SHA256 2ed5089ca707ceab1a3bd83fb5ab94ddee6be339f4f715bf013aeff928aac284
- MD5 ca9846d94a1ec129c703193a60a94c34
- SHA1 04e83fbe69c8a257895fa06042e0ac8d12624eef
- SHA512 fb5baed52c7b39e0c1d1575914098810f3ca4e6cf3401eb6e171e5c4a8b097c8b9d7f53175b609034be905646cd6649fb08617a95152ca657b21d3b0fbc80a65
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqTSFPKoAXjiU4bzN:xfBQGH6SfkKoAX+U49
- TLSH T1CFE449013785CF61C01F15B2C8A3C6F4572BBE02DD4597D7B7C9BF1A39B22AA6A61183
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_ca9846d94a1ec129c703193a60a94c34_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ca9846d94a1ec129c703193a60a94c34_elex_rhadamanthys_smoke-loader
- Size 652KB
- SHA256 2ed5089ca707ceab1a3bd83fb5ab94ddee6be339f4f715bf013aeff928aac284
- MD5 ca9846d94a1ec129c703193a60a94c34
- SHA1 04e83fbe69c8a257895fa06042e0ac8d12624eef
- SHA512 fb5baed52c7b39e0c1d1575914098810f3ca4e6cf3401eb6e171e5c4a8b097c8b9d7f53175b609034be905646cd6649fb08617a95152ca657b21d3b0fbc80a65
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqTSFPKoAXjiU4bzN:xfBQGH6SfkKoAX+U49
- TLSH T1CFE449013785CF61C01F15B2C8A3C6F4572BBE02DD4597D7B7C9BF1A39B22AA6A61183
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.