General
- Target 2026-08-03_140a6581e8443cdd1da278595bfc496f_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- Sample260804-dyrq1sfl9t
- SHA256 490dc4ea98791d357e2b2fe9ad7941ca0e2a612f0a8ea8a773184d76561ad9b9
- MD5 140a6581e8443cdd1da278595bfc496f
- SHA1 b366ff05d3e4376da850b54b767362213476ac87
- SHA512 c85986829023d73a776d8835315245eb38777c45b269c4c7cbb022d9096e9aedfd4089539737a134fb88df6516791db460315a10924e788f3b5742cd3ddad31d
- SSDEEP 24576:wfa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xad:wfayQL9fpTgTZ0og6fWLb+VOa/hunKhP
- TLSH T16965DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_140a6581e8443cdd1da278595bfc496f_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_140a6581e8443cdd1da278595bfc496f_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- SHA256 490dc4ea98791d357e2b2fe9ad7941ca0e2a612f0a8ea8a773184d76561ad9b9
- MD5 140a6581e8443cdd1da278595bfc496f
- SHA1 b366ff05d3e4376da850b54b767362213476ac87
- SHA512 c85986829023d73a776d8835315245eb38777c45b269c4c7cbb022d9096e9aedfd4089539737a134fb88df6516791db460315a10924e788f3b5742cd3ddad31d
- SSDEEP 24576:wfa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xad:wfayQL9fpTgTZ0og6fWLb+VOa/hunKhP
- TLSH T16965DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.