General
- Target 2026-08-05_98e5cebd55d98d7dbf8470e601907dde_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260805-gdfd2awvbt
- SHA256 7c2b9a9f34b3760456881562bb839c8a2bde2c380eceefda2a3b12b8645ef5e9
- MD5 98e5cebd55d98d7dbf8470e601907dde
- SHA1 7719af2d019d97def43502a9fb5689f3e8dbc538
- SHA512 bc5f3c2ce16579d2c8a81c8f3be8941658389b4c241eac57495a5b413f3ee6dd78f6b512398f8c401185d775f795f515eff6229eefedccd7df7d2d8913f28db8
- SSDEEP 6144:4FlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:PfBQGH6SfKCBXoAX+U4
- TLSH T16B65CFB27B92C66BD4E7C23DB4458557A7F29B024D139263A7A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_98e5cebd55d98d7dbf8470e601907dde_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_98e5cebd55d98d7dbf8470e601907dde_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 7c2b9a9f34b3760456881562bb839c8a2bde2c380eceefda2a3b12b8645ef5e9
- MD5 98e5cebd55d98d7dbf8470e601907dde
- SHA1 7719af2d019d97def43502a9fb5689f3e8dbc538
- SHA512 bc5f3c2ce16579d2c8a81c8f3be8941658389b4c241eac57495a5b413f3ee6dd78f6b512398f8c401185d775f795f515eff6229eefedccd7df7d2d8913f28db8
- SSDEEP 6144:4FlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:PfBQGH6SfKCBXoAX+U4
- TLSH T16B65CFB27B92C66BD4E7C23DB4458557A7F29B024D139263A7A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.