General
- Target 2026-08-15_dee882883a540c0aea8942658c0ad22d_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-v2s7pazhra
- SHA256 6974fbbc3631a7e7217e07335e5eacf2de61fa77b006436d2dd4805bcc6da486
- MD5 dee882883a540c0aea8942658c0ad22d
- SHA1 811fd5b01e46fc9a97003ba1e79606295c1c1d7d
- SHA512 32c5a6ce219febf0a6fb53d59ea070b792ce5c8b609daedfa0c0cb5bdd496286304ac30e2e6203d8d91d6f148a144a815faafdb9ce8fb9cf0e7f019f5c6afeb5
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTLoAXjiU4bzF:dfBQGH6SfvoAX+U41
- TLSH T1E65402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_dee882883a540c0aea8942658c0ad22d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_dee882883a540c0aea8942658c0ad22d_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 6974fbbc3631a7e7217e07335e5eacf2de61fa77b006436d2dd4805bcc6da486
- MD5 dee882883a540c0aea8942658c0ad22d
- SHA1 811fd5b01e46fc9a97003ba1e79606295c1c1d7d
- SHA512 32c5a6ce219febf0a6fb53d59ea070b792ce5c8b609daedfa0c0cb5bdd496286304ac30e2e6203d8d91d6f148a144a815faafdb9ce8fb9cf0e7f019f5c6afeb5
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTLoAXjiU4bzF:dfBQGH6SfvoAX+U41
- TLSH T1E65402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.