General
- Target 2026-08-02_98927f92eb2c79134569630928570281_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260802-ge5qbadh33
- SHA256 763c544fe9b6be92a132324202836f51afab4638585f4412bd8a8d4d5de42dbd
- MD5 98927f92eb2c79134569630928570281
- SHA1 fc3d723fa3dbd530734d8c011322418fc763f60a
- SHA512 faa77c7d1eed0fc5ca6b50b880e362738fe916b9702f63875c789f44f37ea531ead4d25e897ec669c95bb383fbebee9e40e566eeb2b1fecc073440b50a0cd66f
- SSDEEP 6144:lFlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:ifBQGH6Sf9oAX+U4
- TLSH T1D25402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_98927f92eb2c79134569630928570281_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_98927f92eb2c79134569630928570281_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 763c544fe9b6be92a132324202836f51afab4638585f4412bd8a8d4d5de42dbd
- MD5 98927f92eb2c79134569630928570281
- SHA1 fc3d723fa3dbd530734d8c011322418fc763f60a
- SHA512 faa77c7d1eed0fc5ca6b50b880e362738fe916b9702f63875c789f44f37ea531ead4d25e897ec669c95bb383fbebee9e40e566eeb2b1fecc073440b50a0cd66f
- SSDEEP 6144:lFlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:ifBQGH6Sf9oAX+U4
- TLSH T1D25402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.