General
- Target 2026-08-11_cc1bce2dd56cb83c5b035f10f93017d7_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260811-y26dsscm3s
- SHA256 5172326c2b68d04042da089ee77a5d94902c0ebd63a8f05749e7152e2c906c6c
- MD5 cc1bce2dd56cb83c5b035f10f93017d7
- SHA1 aa7bdbf09aa778cdda5c40f162b0f66b626ca963
- SHA512 b89b0c8e8345270c1a6e1eb24e32e7b81e09e2a8bd92ae944227fc5e013ef0777b5687cc6a3f4f5d4513be7a3fd732fe282c92d3854da8c9d1808dce2db55025
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:vfBQGH6SfzoAX+U41
- TLSH T1E65402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_cc1bce2dd56cb83c5b035f10f93017d7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_cc1bce2dd56cb83c5b035f10f93017d7_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 5172326c2b68d04042da089ee77a5d94902c0ebd63a8f05749e7152e2c906c6c
- MD5 cc1bce2dd56cb83c5b035f10f93017d7
- SHA1 aa7bdbf09aa778cdda5c40f162b0f66b626ca963
- SHA512 b89b0c8e8345270c1a6e1eb24e32e7b81e09e2a8bd92ae944227fc5e013ef0777b5687cc6a3f4f5d4513be7a3fd732fe282c92d3854da8c9d1808dce2db55025
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:vfBQGH6SfzoAX+U41
- TLSH T1E65402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.