General
- Target 2026-08-04_4858fba98b0edd2b7633a2cdf96d7fd3_elex_rhadamanthys_smoke-loader
- Size 348KB
- Sample260804-y7czfadp91
- SHA256 da4ed7d905fed7f04436d892261edcd607b171f152e7714e474a3db1c1b6f65a
- MD5 4858fba98b0edd2b7633a2cdf96d7fd3
- SHA1 81b9ab2449de7f5bc36f2b1d7132a275e56b074c
- SHA512 a387ae72c001989c9edabb41af83140f287822c997e7e8777af08c1d16abb76ea9d47aed79e91aa466601456ef1223158b8b5de4ca183f0fa1bbf022ad7a213c
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:HfBQGH6Sf27oAX+U4
- TLSH T17474E0503A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_4858fba98b0edd2b7633a2cdf96d7fd3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_4858fba98b0edd2b7633a2cdf96d7fd3_elex_rhadamanthys_smoke-loader
- Size 348KB
- SHA256 da4ed7d905fed7f04436d892261edcd607b171f152e7714e474a3db1c1b6f65a
- MD5 4858fba98b0edd2b7633a2cdf96d7fd3
- SHA1 81b9ab2449de7f5bc36f2b1d7132a275e56b074c
- SHA512 a387ae72c001989c9edabb41af83140f287822c997e7e8777af08c1d16abb76ea9d47aed79e91aa466601456ef1223158b8b5de4ca183f0fa1bbf022ad7a213c
- SSDEEP 6144:wFlKgzelZNQSBQGH/CSpWqT9w7oAXjiU4bz:HfBQGH6Sf27oAX+U4
- TLSH T17474E0503A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.