General
- Target 2026-08-04_74d889f41615b3c91a7c1b1f2bb73a1f_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260804-hkhy6sef57
- SHA256 e1a022b56920c22be23cc177ee0fc1b760e146c50d3600517bc912167c8777d9
- MD5 74d889f41615b3c91a7c1b1f2bb73a1f
- SHA1 4296f1ed9df1d0e85464440f371fe7805dd64a97
- SHA512 b95e33a016b5aa5bddb5d5ee299c3b29b6f0fc18b214dbbcaeefb99849b460ef51f5217967fb646c65021b40cf14f65f3a4d76f1c9a2c0d30c0cb4e6614af85c
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTroAXjiU4bz:CfBQGH6SfPoAX+U4
- TLSH T18954F1917EA2D8B3C4429A314CA6CB6197377D179A65D203B7AD1F4B2F713D09B3A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_74d889f41615b3c91a7c1b1f2bb73a1f_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_74d889f41615b3c91a7c1b1f2bb73a1f_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 e1a022b56920c22be23cc177ee0fc1b760e146c50d3600517bc912167c8777d9
- MD5 74d889f41615b3c91a7c1b1f2bb73a1f
- SHA1 4296f1ed9df1d0e85464440f371fe7805dd64a97
- SHA512 b95e33a016b5aa5bddb5d5ee299c3b29b6f0fc18b214dbbcaeefb99849b460ef51f5217967fb646c65021b40cf14f65f3a4d76f1c9a2c0d30c0cb4e6614af85c
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTroAXjiU4bz:CfBQGH6SfPoAX+U4
- TLSH T18954F1917EA2D8B3C4429A314CA6CB6197377D179A65D203B7AD1F4B2F713D09B3A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.