General
- Target 2026-08-13_940ed95c17793f27532e6b738dcc0e1b_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260813-esae8aar8s
- SHA256 7b481b691e26cd9467d750345cab46f3ae010ffff3507560b93dba6e14afd8a3
- MD5 940ed95c17793f27532e6b738dcc0e1b
- SHA1 fde2c5413f23d65e3fdccc65703b5022314e9e21
- SHA512 9d82f48b0398ffe4072e59643d29b5e56fb4634862d873c61b91393436cfc2941ff3ec874953b363fee897a3902aeda1e890ca00ca6126c45b4edaf8c2e99325
- SSDEEP 6144:AFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzF:3fBQGH6Sf0oAX+U41
- TLSH T1AC5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB5D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_940ed95c17793f27532e6b738dcc0e1b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_940ed95c17793f27532e6b738dcc0e1b_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 7b481b691e26cd9467d750345cab46f3ae010ffff3507560b93dba6e14afd8a3
- MD5 940ed95c17793f27532e6b738dcc0e1b
- SHA1 fde2c5413f23d65e3fdccc65703b5022314e9e21
- SHA512 9d82f48b0398ffe4072e59643d29b5e56fb4634862d873c61b91393436cfc2941ff3ec874953b363fee897a3902aeda1e890ca00ca6126c45b4edaf8c2e99325
- SSDEEP 6144:AFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzF:3fBQGH6Sf0oAX+U41
- TLSH T1AC5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB5D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.