General
- Target 2026-08-14_8860b346abc18d539d577f409ebad498_elex_rhadamanthys_smoke-loader
- Size 400KB
- Sample260814-l24traha36
- SHA256 4b3bf3fd9cdfb81708496bbe4d5896d25ff476d0c120a958ef14042fff7ab3fe
- MD5 8860b346abc18d539d577f409ebad498
- SHA1 62324a048b3de84e0b9f3bcc6a0cb415677af72f
- SHA512 25d93a7df58928ee53ddd7073e33b60168303b4c0d3b34cd5cfc7ff919e62d6b527bc311296433b78f2abd534dcc1d95974f7278bc06cb69c6d27a8ef6714008
- SSDEEP 3072:pCOPi3tG24aqTBB0V06pijcE9pzjIqnnTJkQ3+Fn0jKy6G9kvb0AXj5iNyPpT4bw:XFEqTopY7fLTj3+Fn02y1WoAXjiU4bz
- TLSH T1EE94D0413992C873D0511731C4678ED10BB93C23BED6A62BFB59AA0F3DB0382D66666D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_8860b346abc18d539d577f409ebad498_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8860b346abc18d539d577f409ebad498_elex_rhadamanthys_smoke-loader
- Size 400KB
- SHA256 4b3bf3fd9cdfb81708496bbe4d5896d25ff476d0c120a958ef14042fff7ab3fe
- MD5 8860b346abc18d539d577f409ebad498
- SHA1 62324a048b3de84e0b9f3bcc6a0cb415677af72f
- SHA512 25d93a7df58928ee53ddd7073e33b60168303b4c0d3b34cd5cfc7ff919e62d6b527bc311296433b78f2abd534dcc1d95974f7278bc06cb69c6d27a8ef6714008
- SSDEEP 3072:pCOPi3tG24aqTBB0V06pijcE9pzjIqnnTJkQ3+Fn0jKy6G9kvb0AXj5iNyPpT4bw:XFEqTopY7fLTj3+Fn02y1WoAXjiU4bz
- TLSH T1EE94D0413992C873D0511731C4678ED10BB93C23BED6A62BFB59AA0F3DB0382D66666D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.