General
- Target 2026-08-10_b578cf7eb3f37e47a28dcbdc463dd4dc_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260810-ykl9laxakf
- SHA256 4acdec9bebcb39cc92c26673f797e169b98f0525339d2fe74a5329375581bbbd
- MD5 b578cf7eb3f37e47a28dcbdc463dd4dc
- SHA1 b6b7e923243e5b99e7a6bb3d46cad60f346232b4
- SHA512 422ea744a115a4e0e26249c3c945fef735be7836a222de91f2a213c34a2abd56b1a9cc5127681a7c59c281ca1c8cc1fc353fdda098a2c1f86db9888894c13453
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzN:BfBQGH6SfnoAX+U49
- TLSH T12054F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_b578cf7eb3f37e47a28dcbdc463dd4dc_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_b578cf7eb3f37e47a28dcbdc463dd4dc_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 4acdec9bebcb39cc92c26673f797e169b98f0525339d2fe74a5329375581bbbd
- MD5 b578cf7eb3f37e47a28dcbdc463dd4dc
- SHA1 b6b7e923243e5b99e7a6bb3d46cad60f346232b4
- SHA512 422ea744a115a4e0e26249c3c945fef735be7836a222de91f2a213c34a2abd56b1a9cc5127681a7c59c281ca1c8cc1fc353fdda098a2c1f86db9888894c13453
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzN:BfBQGH6SfnoAX+U49
- TLSH T12054F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.