General
- Target 2026-08-13_623fc4eb3735e6a598c2c52ceb7b4eef_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- Sample260813-fe8arsbl9z
- SHA256 2435ce7f836bb6f88ed1da3b4a456f5a1a4e8d65e69d4604859358cc16ea2ba7
- MD5 623fc4eb3735e6a598c2c52ceb7b4eef
- SHA1 dd1ce49d6ae663e7c1225f39e772c3c0fe318c12
- SHA512 a878b1dab4a9fab335aaaa16081a802f7a716990dbc594c750158040cca189e51e1f1794fc427b9d6477635f9dcc65a5546ae0949e94c37618ad6634233590bd
- SSDEEP 24576:ffa86SfgQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaawIXa:ffaygL9fpTgTZ0og6fWLb+VOa/hunKh3
- TLSH T18265CFC2F202D0A5DC1645308C27DFF81B12BE62AD1116177BD9BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_623fc4eb3735e6a598c2c52ceb7b4eef_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_623fc4eb3735e6a598c2c52ceb7b4eef_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- SHA256 2435ce7f836bb6f88ed1da3b4a456f5a1a4e8d65e69d4604859358cc16ea2ba7
- MD5 623fc4eb3735e6a598c2c52ceb7b4eef
- SHA1 dd1ce49d6ae663e7c1225f39e772c3c0fe318c12
- SHA512 a878b1dab4a9fab335aaaa16081a802f7a716990dbc594c750158040cca189e51e1f1794fc427b9d6477635f9dcc65a5546ae0949e94c37618ad6634233590bd
- SSDEEP 24576:ffa86SfgQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaawIXa:ffaygL9fpTgTZ0og6fWLb+VOa/hunKh3
- TLSH T18265CFC2F202D0A5DC1645308C27DFF81B12BE62AD1116177BD9BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.