General
- Target 2026-08-02_9c2e86f4d2abada364085c855a72244a_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260802-gef2ystwew
- SHA256 f563a3dae123b9ea4d155cb33c66773fd047d86420766b720333cdc5dfcaf951
- MD5 9c2e86f4d2abada364085c855a72244a
- SHA1 8f5be96b958ef2165b9a7fa4c218894287e20ea9
- SHA512 267a2ffa64d83858c498b234adb0984b726e953ac63265ce0ec45fee4e630a079a64fe37ce07a7d52b7570c92829118c3f945cdb142d20f1e60f34187b78d7fd
- SSDEEP 6144:AFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzF:3fBQGH6SfBoAX+U41
- TLSH T13854F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_9c2e86f4d2abada364085c855a72244a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_9c2e86f4d2abada364085c855a72244a_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 f563a3dae123b9ea4d155cb33c66773fd047d86420766b720333cdc5dfcaf951
- MD5 9c2e86f4d2abada364085c855a72244a
- SHA1 8f5be96b958ef2165b9a7fa4c218894287e20ea9
- SHA512 267a2ffa64d83858c498b234adb0984b726e953ac63265ce0ec45fee4e630a079a64fe37ce07a7d52b7570c92829118c3f945cdb142d20f1e60f34187b78d7fd
- SSDEEP 6144:AFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzF:3fBQGH6SfBoAX+U41
- TLSH T13854F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.