General
- Target 2026-08-05_7e1e87e49a10712537833b98f661bd32_elex_rhadamanthys_smoke-loader
- Size 348KB
- Sample260805-glgbaswwcs
- SHA256 085bffc10cba3dd3441a20803228f9e8b4a018b997f64f6774b1cdd4d8a9c942
- MD5 7e1e87e49a10712537833b98f661bd32
- SHA1 b9afc1ba90eed3ab919b17a7277edf2abb3632c4
- SHA512 b60ad24c3ae43c8c969affeb5d9aeadcdb3daefd844c1ad7084ff907e11806db5e68b45803b048414578386791db2e10d61b34cbb5a0b957ca53c68d95d648ab
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:sfBQGH6SfG/oAX+U4
- TLSH T17574D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_7e1e87e49a10712537833b98f661bd32_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_7e1e87e49a10712537833b98f661bd32_elex_rhadamanthys_smoke-loader
- Size 348KB
- SHA256 085bffc10cba3dd3441a20803228f9e8b4a018b997f64f6774b1cdd4d8a9c942
- MD5 7e1e87e49a10712537833b98f661bd32
- SHA1 b9afc1ba90eed3ab919b17a7277edf2abb3632c4
- SHA512 b60ad24c3ae43c8c969affeb5d9aeadcdb3daefd844c1ad7084ff907e11806db5e68b45803b048414578386791db2e10d61b34cbb5a0b957ca53c68d95d648ab
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:sfBQGH6SfG/oAX+U4
- TLSH T17574D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.