General
- Target 2026-08-14_eaa9bd2ac1d358a637dae3e0b0070e06_elex_rhadamanthys_smoke-loader
- Size 296KB
- Sample260814-ld7kqsgr2z
- SHA256 d9afd1d52715be9f5580eeec9119c267c6386efda1823f6e49591f8e5ff22a26
- MD5 eaa9bd2ac1d358a637dae3e0b0070e06
- SHA1 6a1fc460623c6178cab1c69bb109469a2a2d75d5
- SHA512 75edd0f5f10f599b75f4e1702cda6a1d5bde4242511bea450b8e6b24b19520d06194ab412af5ee1361b08fd10b9e45013c28a507d44b85846f0edb0c8f933609
- SSDEEP 3072:eCOPi3tG24aqTBVw++Wkvb0AXj5iNyPpT4bG2k:cFEqTzwtoAXjiU4bz
- TLSH T1A054BE113A9DCB72D3C24931CC6EFAA157767C2EAF568133F7993B4F2E712809626241
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_eaa9bd2ac1d358a637dae3e0b0070e06_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_eaa9bd2ac1d358a637dae3e0b0070e06_elex_rhadamanthys_smoke-loader
- Size 296KB
- SHA256 d9afd1d52715be9f5580eeec9119c267c6386efda1823f6e49591f8e5ff22a26
- MD5 eaa9bd2ac1d358a637dae3e0b0070e06
- SHA1 6a1fc460623c6178cab1c69bb109469a2a2d75d5
- SHA512 75edd0f5f10f599b75f4e1702cda6a1d5bde4242511bea450b8e6b24b19520d06194ab412af5ee1361b08fd10b9e45013c28a507d44b85846f0edb0c8f933609
- SSDEEP 3072:eCOPi3tG24aqTBVw++Wkvb0AXj5iNyPpT4bG2k:cFEqTzwtoAXjiU4bz
- TLSH T1A054BE113A9DCB72D3C24931CC6EFAA157767C2EAF568133F7993B4F2E712809626241
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.