General
- Target 2026-08-04_3818b61ecefd002ae5b965b1f029640e_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260804-tm7wvsdd89
- SHA256 d2bb7d2249af129ee0f2a73d9e746e53f0a00786fe8e0182473a54e2ec561c01
- MD5 3818b61ecefd002ae5b965b1f029640e
- SHA1 2024bfb38bc1bf16e290ba813bce1ead8e225e32
- SHA512 f70881bd7990022d084a614efaef560670aa80420820508be3ce127b003f99f57b08bb767ad09cc9063f760b34daaef2d7db54d60683583d802ee969851ffe93
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqTtoAXjiU4bzF:JfBQGH6SfRoAX+U41
- TLSH T1275401917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_3818b61ecefd002ae5b965b1f029640e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3818b61ecefd002ae5b965b1f029640e_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 d2bb7d2249af129ee0f2a73d9e746e53f0a00786fe8e0182473a54e2ec561c01
- MD5 3818b61ecefd002ae5b965b1f029640e
- SHA1 2024bfb38bc1bf16e290ba813bce1ead8e225e32
- SHA512 f70881bd7990022d084a614efaef560670aa80420820508be3ce127b003f99f57b08bb767ad09cc9063f760b34daaef2d7db54d60683583d802ee969851ffe93
- SSDEEP 6144:uFlKgzelZNQSBQGH/CSpWqTtoAXjiU4bzF:JfBQGH6SfRoAX+U41
- TLSH T1275401917DA2D8B3C0419A3148A6CBA197376D139A65D203FBAD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.