General
- Target 2026-08-04_8ae1fc8c12f9b4a0ed5d784a434bf497_elex_rhadamanthys_smoke-loader
- Size 355KB
- Sample260804-g554rshk9w
- SHA256 cccde06d353b790aed6b98f81a7e2dfaaa1f11f93a6b55c3c89e3029b5ef482d
- MD5 8ae1fc8c12f9b4a0ed5d784a434bf497
- SHA1 43690503dff3838674b2c2d70575f6fecb37f276
- SHA512 e12874f9b0c741ed7154f7fa27b25a3e3fe4d12cce68dc9f1302b3a36bd9f0ad0a89f180c97b550c1e61c1de10345b12869637bf9b38f968bf5e780be3144d07
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:HfBQGH6SfG/oAX+U4
- TLSH T12174D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_8ae1fc8c12f9b4a0ed5d784a434bf497_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8ae1fc8c12f9b4a0ed5d784a434bf497_elex_rhadamanthys_smoke-loader
- Size 355KB
- SHA256 cccde06d353b790aed6b98f81a7e2dfaaa1f11f93a6b55c3c89e3029b5ef482d
- MD5 8ae1fc8c12f9b4a0ed5d784a434bf497
- SHA1 43690503dff3838674b2c2d70575f6fecb37f276
- SHA512 e12874f9b0c741ed7154f7fa27b25a3e3fe4d12cce68dc9f1302b3a36bd9f0ad0a89f180c97b550c1e61c1de10345b12869637bf9b38f968bf5e780be3144d07
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:HfBQGH6SfG/oAX+U4
- TLSH T12174D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.