General
- Target 2026-08-10_92ee6609a235002e08aa7213f5e26f9d_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- Sample260810-ezskdaar5s
- SHA256 76e10816124ba19b2429743ef625f5c5bbb02bd6808bc100aed3ca224754d7ca
- MD5 92ee6609a235002e08aa7213f5e26f9d
- SHA1 b19291ce1a7e7e1d37a8a1a8307503d594568bc1
- SHA512 c3d48fea2f190260971c32bbcfe7d9c4bc1c8e26364b7d6a5f2c1f1b712410a09e0e38c733a7475d9f6a5274054319be516892a0f810ab3acd050892756a8cba
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTbHHHHHHHCoAXjiU4bz:tfBQGH6SfHHHHHHHHCoAX+U4
- TLSH T130A5A5E42741A76DE5F30A3A0654857423F73E8B7C8E72B26D55370BAA30960B7CB21D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_92ee6609a235002e08aa7213f5e26f9d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_92ee6609a235002e08aa7213f5e26f9d_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- SHA256 76e10816124ba19b2429743ef625f5c5bbb02bd6808bc100aed3ca224754d7ca
- MD5 92ee6609a235002e08aa7213f5e26f9d
- SHA1 b19291ce1a7e7e1d37a8a1a8307503d594568bc1
- SHA512 c3d48fea2f190260971c32bbcfe7d9c4bc1c8e26364b7d6a5f2c1f1b712410a09e0e38c733a7475d9f6a5274054319be516892a0f810ab3acd050892756a8cba
- SSDEEP 6144:qFlKgzelZNQSBQGH/CSpWqTbHHHHHHHCoAXjiU4bz:tfBQGH6SfHHHHHHHHCoAX+U4
- TLSH T130A5A5E42741A76DE5F30A3A0654857423F73E8B7C8E72B26D55370BAA30960B7CB21D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.