General
- Target 2026-08-14_c8b525a5735851a5e3e2930d9379238b_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260814-xmc82azanf
- SHA256 7ff1b1ee7f7a3d1483ec48b17e48a14690f3a8779efd799b930695be1aa057b0
- MD5 c8b525a5735851a5e3e2930d9379238b
- SHA1 622cfecc0cea43c0c134f8a266168241c6eeb4b2
- SHA512 cfb30db03d7383554053829cc8f1980387fdd13150385bd8e08f5474303bb52b474955274162bf5940d51fe005afe899ab58766cf507fb791f8e3dc075671d30
- SSDEEP 6144:1FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:SfBQGH6SfuoAX+U41
- TLSH T1E15402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_c8b525a5735851a5e3e2930d9379238b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c8b525a5735851a5e3e2930d9379238b_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 7ff1b1ee7f7a3d1483ec48b17e48a14690f3a8779efd799b930695be1aa057b0
- MD5 c8b525a5735851a5e3e2930d9379238b
- SHA1 622cfecc0cea43c0c134f8a266168241c6eeb4b2
- SHA512 cfb30db03d7383554053829cc8f1980387fdd13150385bd8e08f5474303bb52b474955274162bf5940d51fe005afe899ab58766cf507fb791f8e3dc075671d30
- SSDEEP 6144:1FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:SfBQGH6SfuoAX+U41
- TLSH T1E15402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.