General
- Target 2026-08-06_1e2ee09e85a968142bd63a7f73ba18f3_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260807-bednyavcqe
- SHA256 fc01079d389f010f90bcd80ad0d7c4cf3cfddca9e6e56055e6cb928fa11f188c
- MD5 1e2ee09e85a968142bd63a7f73ba18f3
- SHA1 6ec8d14d5483d946f0d18a7f28000418045bc6bc
- SHA512 b58fb10b415110647eb44097c126260f385baba2fc13f658fb340377769ff0b782d49c4c230241ec70c75b7ac6d578cbdb3f3b8c4f9690d0e3d05cfdc3c98dd8
- SSDEEP 6144:oFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:ffBQGH6SfQoAX+U49
- TLSH T1765402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BA6361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_1e2ee09e85a968142bd63a7f73ba18f3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_1e2ee09e85a968142bd63a7f73ba18f3_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 fc01079d389f010f90bcd80ad0d7c4cf3cfddca9e6e56055e6cb928fa11f188c
- MD5 1e2ee09e85a968142bd63a7f73ba18f3
- SHA1 6ec8d14d5483d946f0d18a7f28000418045bc6bc
- SHA512 b58fb10b415110647eb44097c126260f385baba2fc13f658fb340377769ff0b782d49c4c230241ec70c75b7ac6d578cbdb3f3b8c4f9690d0e3d05cfdc3c98dd8
- SSDEEP 6144:oFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:ffBQGH6SfQoAX+U49
- TLSH T1765402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BA6361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.