General
- Target 2026-08-08_9709ef1b425f2bae544274008776db4b_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260808-fgsm4azhrb
- SHA256 2784e5ac9516a3c7bd73adbc486cab43358246922f12b4bbb9b8f571f5bcce66
- MD5 9709ef1b425f2bae544274008776db4b
- SHA1 f591a14bcfc875716d892f01813e0b0221912696
- SHA512 a8bfdcdb6bcf3a6ca5173d37b27d0777509a1f224f1ec1f2ec05ee3f3e045e0793b7ad0ca8875a9c159b96c98962cc74d92d6fae48f445194bd2033caaad3ec1
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzN:ZfBQGH6Sf0oAX+U49
- TLSH T10D5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_9709ef1b425f2bae544274008776db4b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_9709ef1b425f2bae544274008776db4b_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 2784e5ac9516a3c7bd73adbc486cab43358246922f12b4bbb9b8f571f5bcce66
- MD5 9709ef1b425f2bae544274008776db4b
- SHA1 f591a14bcfc875716d892f01813e0b0221912696
- SHA512 a8bfdcdb6bcf3a6ca5173d37b27d0777509a1f224f1ec1f2ec05ee3f3e045e0793b7ad0ca8875a9c159b96c98962cc74d92d6fae48f445194bd2033caaad3ec1
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzN:ZfBQGH6Sf0oAX+U49
- TLSH T10D5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.