General
- Target 2026-08-14_741140ba71dac2dead45a4d19788c513_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260814-x3c8zabe78
- SHA256 288272df1bc87f57295365a90ba94a82c8449b7f4b1ae69e4fb3807ac14e695b
- MD5 741140ba71dac2dead45a4d19788c513
- SHA1 ff0e980040bf956ffcbde90701ed7077f4eb364d
- SHA512 51aa0bce65ecbf0c09dc46f709858c6d621b00da3cd042b42425649d7bd813cb3e592b054093b08e590ae185bf30764b865ffeadf53937147e57c4527faa459c
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTfueF/mNyBqoAXjiU4bz:+fBQGH6SfaCBqoAX+U4
- TLSH T1BA75CFB17B93856BD4E7C23CB1858593ABF69B031D539263D7A0EE3DCA392814DD8C42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_741140ba71dac2dead45a4d19788c513_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_741140ba71dac2dead45a4d19788c513_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 288272df1bc87f57295365a90ba94a82c8449b7f4b1ae69e4fb3807ac14e695b
- MD5 741140ba71dac2dead45a4d19788c513
- SHA1 ff0e980040bf956ffcbde90701ed7077f4eb364d
- SHA512 51aa0bce65ecbf0c09dc46f709858c6d621b00da3cd042b42425649d7bd813cb3e592b054093b08e590ae185bf30764b865ffeadf53937147e57c4527faa459c
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTfueF/mNyBqoAXjiU4bz:+fBQGH6SfaCBqoAX+U4
- TLSH T1BA75CFB17B93856BD4E7C23CB1858593ABF69B031D539263D7A0EE3DCA392814DD8C42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.