General
- Target 2026-08-10_97166650563fc4a8cca8b9fd120c3349_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260810-ex9e4svycx
- SHA256 feed6297770dec91eb9d85f6dd14aa82697d49b1df9bc94b422723bd806213be
- MD5 97166650563fc4a8cca8b9fd120c3349
- SHA1 285c203370c83c627a2c28bed11af57385508d64
- SHA512 ee4c6e52c99cb95dcd7f2bc98d722c62cbe1e6e2361c40bd584aeeea0ce076bc445438b3d52f483cab27c7454ad08d6f16b6d4f6326a1d97e3550aaa4534c534
- SSDEEP 6144:3FlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:ofBQGH6SfBoAX+U4l
- TLSH T16454F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_97166650563fc4a8cca8b9fd120c3349_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_97166650563fc4a8cca8b9fd120c3349_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 feed6297770dec91eb9d85f6dd14aa82697d49b1df9bc94b422723bd806213be
- MD5 97166650563fc4a8cca8b9fd120c3349
- SHA1 285c203370c83c627a2c28bed11af57385508d64
- SHA512 ee4c6e52c99cb95dcd7f2bc98d722c62cbe1e6e2361c40bd584aeeea0ce076bc445438b3d52f483cab27c7454ad08d6f16b6d4f6326a1d97e3550aaa4534c534
- SSDEEP 6144:3FlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:ofBQGH6SfBoAX+U4l
- TLSH T16454F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.