General
- Target 2026-08-14_337b5c804241e770467442bce0b1d8e2_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260814-ydgersgp2v
- SHA256 68118d6add415a7685bc2874734b3fbab6d7b9960e02e854737596cc60065046
- MD5 337b5c804241e770467442bce0b1d8e2
- SHA1 e276c09bf0ec02e2f0ac5730055163e872016607
- SHA512 af79b01ffb05192c87d40c717d652b85ddd40f05fc4e7f18944896c794c1351c2164464518060ad82d8485531047f923bfc8274d214ac6313b2b15d45e730832
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzN:ZfBQGH6SfRoAX+U49
- TLSH T13A5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_337b5c804241e770467442bce0b1d8e2_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_337b5c804241e770467442bce0b1d8e2_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 68118d6add415a7685bc2874734b3fbab6d7b9960e02e854737596cc60065046
- MD5 337b5c804241e770467442bce0b1d8e2
- SHA1 e276c09bf0ec02e2f0ac5730055163e872016607
- SHA512 af79b01ffb05192c87d40c717d652b85ddd40f05fc4e7f18944896c794c1351c2164464518060ad82d8485531047f923bfc8274d214ac6313b2b15d45e730832
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzN:ZfBQGH6SfRoAX+U49
- TLSH T13A5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.