General
- Target 2026-08-10_d1c36b4900dd49447c5cbf95111137a0_elex_rhadamanthys_smoke-loader
- Size 644KB
- Sample260810-lkqwkazzcs
- SHA256 5b78203078d29407092888650f0d3b4bd7e7916e22486d778dda7a25ba9ba22c
- MD5 d1c36b4900dd49447c5cbf95111137a0
- SHA1 289b6cf4c9833024b8a94ced8489fab8b88ba72f
- SHA512 640795d0be61d0d59cd915a11720e335a76b62bdb3db0894a9f3fa1625a3dadb1663c5c1617348332d3950628df65dceefacc1f2adece6df49f44b17a005f2d6
- SSDEEP 6144:GFlKgzelZNQSBQGH/CSpWqT1FProAXjiU4bzF:hfBQGH6Sf7roAX+U41
- TLSH T103E449023785CF61C01F15B2C8A3C6F4572BBE02DD4597D7B7C9BF1A39B22AA6A51183
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_d1c36b4900dd49447c5cbf95111137a0_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d1c36b4900dd49447c5cbf95111137a0_elex_rhadamanthys_smoke-loader
- Size 644KB
- SHA256 5b78203078d29407092888650f0d3b4bd7e7916e22486d778dda7a25ba9ba22c
- MD5 d1c36b4900dd49447c5cbf95111137a0
- SHA1 289b6cf4c9833024b8a94ced8489fab8b88ba72f
- SHA512 640795d0be61d0d59cd915a11720e335a76b62bdb3db0894a9f3fa1625a3dadb1663c5c1617348332d3950628df65dceefacc1f2adece6df49f44b17a005f2d6
- SSDEEP 6144:GFlKgzelZNQSBQGH/CSpWqT1FProAXjiU4bzF:hfBQGH6Sf7roAX+U41
- TLSH T103E449023785CF61C01F15B2C8A3C6F4572BBE02DD4597D7B7C9BF1A39B22AA6A51183
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.