General
- Target 2026-08-14_3c276a69aa314ba47750ce14baefa32e_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260814-mlv3ca11ew
- SHA256 4d76e29a191e0ab7867000acfe0d78a9191a83a1f15040d40fa8ceb1a859c214
- MD5 3c276a69aa314ba47750ce14baefa32e
- SHA1 5341de4dd7e429b95f384a293cb1a7a6e0ab7505
- SHA512 beca6d85b588dcf4f738c17af8d02d529d0a423a6faa3537502cadb87034049a6122fc51b9f3728258584218735efe9b4908fd3ecbcbdeb0b5af63c26970d336
- SSDEEP 3072:WCOPi3tG24aqTBS0gkvb0AXj5iNyPpT4bG2k:UFEqT3oAXjiU4bz
- TLSH T18B54D0513DA3C473D0514A3188A68BE19B7F7C03BA6AC117FB991F4F2EB138097762A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_3c276a69aa314ba47750ce14baefa32e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3c276a69aa314ba47750ce14baefa32e_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 4d76e29a191e0ab7867000acfe0d78a9191a83a1f15040d40fa8ceb1a859c214
- MD5 3c276a69aa314ba47750ce14baefa32e
- SHA1 5341de4dd7e429b95f384a293cb1a7a6e0ab7505
- SHA512 beca6d85b588dcf4f738c17af8d02d529d0a423a6faa3537502cadb87034049a6122fc51b9f3728258584218735efe9b4908fd3ecbcbdeb0b5af63c26970d336
- SSDEEP 3072:WCOPi3tG24aqTBS0gkvb0AXj5iNyPpT4bG2k:UFEqT3oAXjiU4bz
- TLSH T18B54D0513DA3C473D0514A3188A68BE19B7F7C03BA6AC117FB991F4F2EB138097762A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.