General
- Target 2026-08-10_8161826629f9020c92463e050f7bfc54_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- Sample260810-e7kjqs1ejd
- SHA256 ecbd36eedfa49ac7ca36b9b9cae6d75077b4749f6b85c97ec7d689065669bccb
- MD5 8161826629f9020c92463e050f7bfc54
- SHA1 4586b940d6c91acf50e90745800d1968b5bfbd27
- SHA512 1d24ba22ffcf6831e2bacbd6a2819a11b02217bca95d20e6c3eb9fb7cdd150a5c7e0e7865d6327fef93ed8de36179b2302a103b515ec7537ba4bd7a9a06a92a7
- SSDEEP 24576:0fa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xat:0fayQL9fpTgTZ0og6fWLb+VOa/hunKh/
- TLSH T1C365DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_8161826629f9020c92463e050f7bfc54_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8161826629f9020c92463e050f7bfc54_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- SHA256 ecbd36eedfa49ac7ca36b9b9cae6d75077b4749f6b85c97ec7d689065669bccb
- MD5 8161826629f9020c92463e050f7bfc54
- SHA1 4586b940d6c91acf50e90745800d1968b5bfbd27
- SHA512 1d24ba22ffcf6831e2bacbd6a2819a11b02217bca95d20e6c3eb9fb7cdd150a5c7e0e7865d6327fef93ed8de36179b2302a103b515ec7537ba4bd7a9a06a92a7
- SSDEEP 24576:0fa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xat:0fayQL9fpTgTZ0og6fWLb+VOa/hunKh/
- TLSH T1C365DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.