General
- Target 2026-08-14_8c181faf63e84a5257e1122d6981216a_elex_rhadamanthys_smoke-loader
- Size 344KB
- Sample260814-l1xdaa1arg
- SHA256 621bd74d5b3542e5a265e2b06f2f91225ab1f325a75c9c67f69bfd8ed3bc6055
- MD5 8c181faf63e84a5257e1122d6981216a
- SHA1 925e984424ae102703a5162f0964e69a8179f9cd
- SHA512 224ad20bd143d46ab1f55e8835c8ee14e14c57bce36fb303e926ea1ce686700f3dc2571fa0bab33e075b5d58a0a5db09ba078c88d14228cc8b2e4001f2616943
- SSDEEP 3072:yCOPi3tG24aqTBrgmQ+Pkvb0AXj5iNyPpT4bG2k:AFEqTKmQhoAXjiU4bz
- TLSH T1D774D04279B1D4B3D0510671886B8B61B7377C12AA69C603BB9D1F8F2FB17909B3634E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_8c181faf63e84a5257e1122d6981216a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8c181faf63e84a5257e1122d6981216a_elex_rhadamanthys_smoke-loader
- Size 344KB
- SHA256 621bd74d5b3542e5a265e2b06f2f91225ab1f325a75c9c67f69bfd8ed3bc6055
- MD5 8c181faf63e84a5257e1122d6981216a
- SHA1 925e984424ae102703a5162f0964e69a8179f9cd
- SHA512 224ad20bd143d46ab1f55e8835c8ee14e14c57bce36fb303e926ea1ce686700f3dc2571fa0bab33e075b5d58a0a5db09ba078c88d14228cc8b2e4001f2616943
- SSDEEP 3072:yCOPi3tG24aqTBrgmQ+Pkvb0AXj5iNyPpT4bG2k:AFEqTKmQhoAXjiU4bz
- TLSH T1D774D04279B1D4B3D0510671886B8B61B7377C12AA69C603BB9D1F8F2FB17909B3634E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.