General
- Target 2026-08-14_18b38d9e688a9d214b0ac7f87b196a51_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260814-j951nsydpd
- SHA256 f4b90fd746cbeb860bc37a7bdf999176b2a66f839faa2fda88fbd5099c0a3b3c
- MD5 18b38d9e688a9d214b0ac7f87b196a51
- SHA1 162b617fd5b9d8ec21e5ac01e2b8f68f3f84d8c1
- SHA512 2456331bf84f0ac9b5f1a23e277830b01babec8b12a5fbb347d5e13d7dd3f407f95f3cd861d91ffd5c4b6c2eb55f7c9d3ed242bcf99cd82763e7b097d94e51ae
- SSDEEP 3072:2COPi3tG24aqTB9fTGokvb0AXj5iNyPpT4bG2k:0FEqTEoAXjiU4bz
- TLSH T16854D0513C63C473D051493188A68BE18BBE7C03BAABD11BFB990F4B1EF138097766A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_18b38d9e688a9d214b0ac7f87b196a51_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_18b38d9e688a9d214b0ac7f87b196a51_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 f4b90fd746cbeb860bc37a7bdf999176b2a66f839faa2fda88fbd5099c0a3b3c
- MD5 18b38d9e688a9d214b0ac7f87b196a51
- SHA1 162b617fd5b9d8ec21e5ac01e2b8f68f3f84d8c1
- SHA512 2456331bf84f0ac9b5f1a23e277830b01babec8b12a5fbb347d5e13d7dd3f407f95f3cd861d91ffd5c4b6c2eb55f7c9d3ed242bcf99cd82763e7b097d94e51ae
- SSDEEP 3072:2COPi3tG24aqTB9fTGokvb0AXj5iNyPpT4bG2k:0FEqTEoAXjiU4bz
- TLSH T16854D0513C63C473D051493188A68BE18BBE7C03BAABD11BFB990F4B1EF138097766A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.