General
- Target 2026-08-07_9ada978a676c6189dfd0fb528814a3c3_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260807-vtfavszfnc
- SHA256 815f4da9fade4c72ecb5c9d976d6775b99f2b662637c5624e03f422ff847ca3b
- MD5 9ada978a676c6189dfd0fb528814a3c3
- SHA1 7de7f73f9d56fc8bced3d159c3495a678b989f22
- SHA512 b9850d4ae235c354a655ef97b6d0d7544cbe6fc71c52c5c108b443615f95c461dfebccffad739624f478bd9cd81fa4fba2edcf03c9580c1a8434dabc2ba30d24
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:sfBQGH6SfxoAX+U49
- TLSH T1365402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_9ada978a676c6189dfd0fb528814a3c3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_9ada978a676c6189dfd0fb528814a3c3_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 815f4da9fade4c72ecb5c9d976d6775b99f2b662637c5624e03f422ff847ca3b
- MD5 9ada978a676c6189dfd0fb528814a3c3
- SHA1 7de7f73f9d56fc8bced3d159c3495a678b989f22
- SHA512 b9850d4ae235c354a655ef97b6d0d7544cbe6fc71c52c5c108b443615f95c461dfebccffad739624f478bd9cd81fa4fba2edcf03c9580c1a8434dabc2ba30d24
- SSDEEP 6144:jFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:sfBQGH6SfxoAX+U49
- TLSH T1365402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.