General
- Target 2026-08-12_00f0c02c2c28b47e36426eba4665f4ce_elex_rhadamanthys_smoke-loader
- Size 494KB
- Sample260812-k2pt6ataph
- SHA256 bd9e961dc1572cdd1500299e7e791ea65c7f7b15b733b283c35c9e5804b65693
- MD5 00f0c02c2c28b47e36426eba4665f4ce
- SHA1 ca48e433cd9575adc6ba83a21ffb66fbe62b02e1
- SHA512 b45d99f5201869956ffe4afe30abfd86aec749bd25b92326f88e6d6e3e60651b6d5b52e52093d8bfef1fb44bf15c6251124039e64c10dc51d982bdc58d62c1e4
- SSDEEP 6144:dFlKgzelZNQSBQGH/CSpWqTzoAXjiU4bz:6fBQGH6SfvoAX+U4
- TLSH T1CDB4BD5D395F86F2D305993C8465CBA1C73AFF03E961B107BBC83B0BAA722C746552A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_00f0c02c2c28b47e36426eba4665f4ce_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_00f0c02c2c28b47e36426eba4665f4ce_elex_rhadamanthys_smoke-loader
- Size 494KB
- SHA256 bd9e961dc1572cdd1500299e7e791ea65c7f7b15b733b283c35c9e5804b65693
- MD5 00f0c02c2c28b47e36426eba4665f4ce
- SHA1 ca48e433cd9575adc6ba83a21ffb66fbe62b02e1
- SHA512 b45d99f5201869956ffe4afe30abfd86aec749bd25b92326f88e6d6e3e60651b6d5b52e52093d8bfef1fb44bf15c6251124039e64c10dc51d982bdc58d62c1e4
- SSDEEP 6144:dFlKgzelZNQSBQGH/CSpWqTzoAXjiU4bz:6fBQGH6SfvoAX+U4
- TLSH T1CDB4BD5D395F86F2D305993C8465CBA1C73AFF03E961B107BBC83B0BAA722C746552A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.