General
- Target 2026-08-03_86459691a0266e218503894cfa5ac30a_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260804-m4py2stzby
- SHA256 bc4efe33696ba84a824d4647c8f534965e5d74f4a7ec69ac78853da38eb3c6b8
- MD5 86459691a0266e218503894cfa5ac30a
- SHA1 1a8aa77dd2ea9bcb9e26698e49f7b71981f6d7f5
- SHA512 606cca6a46616e0578ce18ef6039b5811c578adf7104d502967af923396f61485e2bfb21f46ef42d74c37a4c0af7e8ce3e14c723356fa79f292b2a228dcd463f
- SSDEEP 6144:RFlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:GfBQGH6Sf9oAX+U4
- TLSH T1EA5402457D93C4B3D0414D3188E68BE15B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_86459691a0266e218503894cfa5ac30a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_86459691a0266e218503894cfa5ac30a_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 bc4efe33696ba84a824d4647c8f534965e5d74f4a7ec69ac78853da38eb3c6b8
- MD5 86459691a0266e218503894cfa5ac30a
- SHA1 1a8aa77dd2ea9bcb9e26698e49f7b71981f6d7f5
- SHA512 606cca6a46616e0578ce18ef6039b5811c578adf7104d502967af923396f61485e2bfb21f46ef42d74c37a4c0af7e8ce3e14c723356fa79f292b2a228dcd463f
- SSDEEP 6144:RFlKgzelZNQSBQGH/CSpWqT5oAXjiU4bz:GfBQGH6Sf9oAX+U4
- TLSH T1EA5402457D93C4B3D0414D3188E68BE15B7F6C137AA6E11BFB9D0B4B1EB13884BA6271
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.