General
- Target 2026-08-15_39ee1c7d73c57601d792d46ea81c411d_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260815-esae8aen8w
- SHA256 865faf3ba2d75232ae9dc7be71db2a7db924204a876161e942ac01f9672c165c
- MD5 39ee1c7d73c57601d792d46ea81c411d
- SHA1 799fe8d744c7a9066886a10e840277163b31d842
- SHA512 0da79077589fd227133ed2caf9124fbd2de74c3c05445b0a0396ffa2275a191a3337937c155ddadee082e1bd6701539a35fad2dffacabf171c3c004d5d387ff5
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:TfBQGH6SfioAX+U4
- TLSH T1FF7502457DA3C4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_39ee1c7d73c57601d792d46ea81c411d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_39ee1c7d73c57601d792d46ea81c411d_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 865faf3ba2d75232ae9dc7be71db2a7db924204a876161e942ac01f9672c165c
- MD5 39ee1c7d73c57601d792d46ea81c411d
- SHA1 799fe8d744c7a9066886a10e840277163b31d842
- SHA512 0da79077589fd227133ed2caf9124fbd2de74c3c05445b0a0396ffa2275a191a3337937c155ddadee082e1bd6701539a35fad2dffacabf171c3c004d5d387ff5
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqTeoAXjiU4bz:TfBQGH6SfioAX+U4
- TLSH T1FF7502457DA3C4B3D0414D3188E68BE18B7F6C137AA6E117FB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.