General
- Target 2026-08-08_582a8afaf6341e9b2700a8da4e9774d7_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260808-zmlaravbmd
- SHA256 355cc71aed1cded79f5a91f28a3ec6e9d3fe991b754289916d96d21028bc99e7
- MD5 582a8afaf6341e9b2700a8da4e9774d7
- SHA1 f199f4bc2742ac0b1798dd5768e04395f9235199
- SHA512 d88cd5820bf1aad78ae00d22988005191f094d207a9bcd828ea686d2d2a92cb69bf8d65c00f18b584a59671872c455fa44014e00435138f0056236631de059a9
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:ZfBQGH6SfuoAX+U41
- TLSH T1CE5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_582a8afaf6341e9b2700a8da4e9774d7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_582a8afaf6341e9b2700a8da4e9774d7_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 355cc71aed1cded79f5a91f28a3ec6e9d3fe991b754289916d96d21028bc99e7
- MD5 582a8afaf6341e9b2700a8da4e9774d7
- SHA1 f199f4bc2742ac0b1798dd5768e04395f9235199
- SHA512 d88cd5820bf1aad78ae00d22988005191f094d207a9bcd828ea686d2d2a92cb69bf8d65c00f18b584a59671872c455fa44014e00435138f0056236631de059a9
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:ZfBQGH6SfuoAX+U41
- TLSH T1CE5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.