General
- Target 2026-08-04_17427a1009195a71e2b5a415e29945ed_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260804-zzgs4aek7v
- SHA256 c0e6501b2b974d799c27a2518f01b69573dafc6b25143fab1ab6b863e8d1ff00
- MD5 17427a1009195a71e2b5a415e29945ed
- SHA1 138e5069f8006ed827a582de5d4d643d68a982e9
- SHA512 76a3a32ca60a8f11cb9049473942e81eb6ceba3081242b3b995435a5f633cdf3780edae394f6134fee6e5fc4ca3a7a38beb8b9e82b09356d76a33abec864d34b
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:TfBQGH6SfcoAX+U41
- TLSH T14E5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_17427a1009195a71e2b5a415e29945ed_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_17427a1009195a71e2b5a415e29945ed_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 c0e6501b2b974d799c27a2518f01b69573dafc6b25143fab1ab6b863e8d1ff00
- MD5 17427a1009195a71e2b5a415e29945ed
- SHA1 138e5069f8006ed827a582de5d4d643d68a982e9
- SHA512 76a3a32ca60a8f11cb9049473942e81eb6ceba3081242b3b995435a5f633cdf3780edae394f6134fee6e5fc4ca3a7a38beb8b9e82b09356d76a33abec864d34b
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:TfBQGH6SfcoAX+U41
- TLSH T14E5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.