General
- Target 2026-08-03_27abcb0daea0078a8502bb6249369dfc_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260804-dn9h3sfk4x
- SHA256 c738cefe07aa9dba8fbb9d89c6888cf8309bec278827b578dc6be83b9090a822
- MD5 27abcb0daea0078a8502bb6249369dfc
- SHA1 6d82a012c56745db71b99e7d103c9be5ee416f54
- SHA512 3649d5a90c8cd5a47c4e9a5432c580e6fec9f6614e7bed81d97f3aec39b2f740f9902c8eb3dcda32669faf6c6b75f78cb1bffca15fa16c4bdef42e044085dad9
- SSDEEP 6144:MFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:LfBQGH6SfBoAX+U4l
- TLSH T1A854F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_27abcb0daea0078a8502bb6249369dfc_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_27abcb0daea0078a8502bb6249369dfc_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 c738cefe07aa9dba8fbb9d89c6888cf8309bec278827b578dc6be83b9090a822
- MD5 27abcb0daea0078a8502bb6249369dfc
- SHA1 6d82a012c56745db71b99e7d103c9be5ee416f54
- SHA512 3649d5a90c8cd5a47c4e9a5432c580e6fec9f6614e7bed81d97f3aec39b2f740f9902c8eb3dcda32669faf6c6b75f78cb1bffca15fa16c4bdef42e044085dad9
- SSDEEP 6144:MFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:LfBQGH6SfBoAX+U4l
- TLSH T1A854F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.