General
- Target 2026-08-05_62f3d579f9aa5a31cbf68acfcd6bc7f7_elex_rhadamanthys_smoke-loader
- Size 333KB
- Sample260805-gqbxdaee39
- SHA256 b3a2d19cea96d073b98fcad195e9a0fe232b827144073cd1266fa0bffcd9776f
- MD5 62f3d579f9aa5a31cbf68acfcd6bc7f7
- SHA1 a5e2cd8a371a263da37452f358e0bb0ecc86dc54
- SHA512 37d6da9be8464fe61f281c34ca24bd14f9709b1c01df550a76f7276fba316339ce603fdcc8b38d6bd75c82da632ae1bde2791c0347ee6dd68c8c8b209e339c52
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bz:mfBQGH6SfloAX+U4
- TLSH T1437401917DA2D8B3D0414A3148A68FA197376D13AA65D203FBAD0F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_62f3d579f9aa5a31cbf68acfcd6bc7f7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_62f3d579f9aa5a31cbf68acfcd6bc7f7_elex_rhadamanthys_smoke-loader
- Size 333KB
- SHA256 b3a2d19cea96d073b98fcad195e9a0fe232b827144073cd1266fa0bffcd9776f
- MD5 62f3d579f9aa5a31cbf68acfcd6bc7f7
- SHA1 a5e2cd8a371a263da37452f358e0bb0ecc86dc54
- SHA512 37d6da9be8464fe61f281c34ca24bd14f9709b1c01df550a76f7276fba316339ce603fdcc8b38d6bd75c82da632ae1bde2791c0347ee6dd68c8c8b209e339c52
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bz:mfBQGH6SfloAX+U4
- TLSH T1437401917DA2D8B3D0414A3148A68FA197376D13AA65D203FBAD0F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.