General
- Target 2026-08-08_80ee6f525c2836a5d82ac56ac1f8e135_elex_rhadamanthys_smoke-loader
- Size 343KB
- Sample260808-flc37stxf1
- SHA256 21ff3d19e190fd7f1be91412837330ef20365ccac962d29a0968130c94088270
- MD5 80ee6f525c2836a5d82ac56ac1f8e135
- SHA1 46c9fc59f527617bc324533b1ec16b41e38a83ab
- SHA512 4eba68f708c3681a8207fa81625d31c35089ad65aa947140b618c824c32cf0059e24f3b394fd65cb0b3fd8a552408dfbe239c62b98dceff33deef87409449c19
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:tfBQGH6SfG/oAX+U4
- TLSH T1C674D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_80ee6f525c2836a5d82ac56ac1f8e135_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_80ee6f525c2836a5d82ac56ac1f8e135_elex_rhadamanthys_smoke-loader
- Size 343KB
- SHA256 21ff3d19e190fd7f1be91412837330ef20365ccac962d29a0968130c94088270
- MD5 80ee6f525c2836a5d82ac56ac1f8e135
- SHA1 46c9fc59f527617bc324533b1ec16b41e38a83ab
- SHA512 4eba68f708c3681a8207fa81625d31c35089ad65aa947140b618c824c32cf0059e24f3b394fd65cb0b3fd8a552408dfbe239c62b98dceff33deef87409449c19
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTNw/oAXjiU4bz:tfBQGH6SfG/oAX+U4
- TLSH T1C674D0003A9ECBB2D3C249318CAEFAE1477A7C2FAB559137F7983B0F1E712845656251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.