General
- Target 2026-08-15_be18bfd8beb90a47c40599cff1291872_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-dvtq7sde97
- SHA256 290ab0e92450e8465fee2af8694dd6aae2e9588e4e4a7ec7c748eee0408b0be2
- MD5 be18bfd8beb90a47c40599cff1291872
- SHA1 566bbb00498c458439de7c479df3ecac5c605078
- SHA512 7be53644d8ed0a223b8ee8316899cd24bd745365996a9d97ad3ab7bf3265e34e51ab825ee92392098eac088cd040bbb2386ea9d4a46ed18a9848dec5f598ef04
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:VfBQGH6SfRoAX+U4l
- TLSH T1BA5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_be18bfd8beb90a47c40599cff1291872_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_be18bfd8beb90a47c40599cff1291872_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 290ab0e92450e8465fee2af8694dd6aae2e9588e4e4a7ec7c748eee0408b0be2
- MD5 be18bfd8beb90a47c40599cff1291872
- SHA1 566bbb00498c458439de7c479df3ecac5c605078
- SHA512 7be53644d8ed0a223b8ee8316899cd24bd745365996a9d97ad3ab7bf3265e34e51ab825ee92392098eac088cd040bbb2386ea9d4a46ed18a9848dec5f598ef04
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:VfBQGH6SfRoAX+U4l
- TLSH T1BA5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.