General
- Target 2026-08-04_f5c6bf7cddd65671d9fda3f6bc220049_elex_rhadamanthys_smoke-loader
- Size 347KB
- Sample260804-qqt8ds1gng
- SHA256 f8b81b9a73185b630e75abdbefb9e28a8f9f5c3ea8a7a3f87fc2bfe66ce55d74
- MD5 f5c6bf7cddd65671d9fda3f6bc220049
- SHA1 8b41b79e8effefa9895a8a36e903558b88b9cf47
- SHA512 7961b315a7a8ef9aa257f01eb56d34383716b818991372047299357d52d5bb0e657a51459dcdd9d7609fbf418612c9c299b21a718166de190a8b533d39087393
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:AfBQGH6SfG/oAX+U4
- TLSH T1A574D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_f5c6bf7cddd65671d9fda3f6bc220049_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f5c6bf7cddd65671d9fda3f6bc220049_elex_rhadamanthys_smoke-loader
- Size 347KB
- SHA256 f8b81b9a73185b630e75abdbefb9e28a8f9f5c3ea8a7a3f87fc2bfe66ce55d74
- MD5 f5c6bf7cddd65671d9fda3f6bc220049
- SHA1 8b41b79e8effefa9895a8a36e903558b88b9cf47
- SHA512 7961b315a7a8ef9aa257f01eb56d34383716b818991372047299357d52d5bb0e657a51459dcdd9d7609fbf418612c9c299b21a718166de190a8b533d39087393
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:AfBQGH6SfG/oAX+U4
- TLSH T1A574D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.