General
- Target 2026-08-15_f0faf049deab749127abee6a9ee818a0_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-vy4h9agh58
- SHA256 380657276fb328f446ac4e1731c6d203063b968f118c798672b426212203277c
- MD5 f0faf049deab749127abee6a9ee818a0
- SHA1 7eef43211210b9901e37790c3b5bb30f08dc33c5
- SHA512 02fce671d73fbcae52efc1850882978bcd9c3b11476331cca5169aa50bbf035dd58be46f79f7a1bf75b0ab8d960b80b5352ccd3b8d1d8103903bc57bbfba6f41
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:dfBQGH6SfzoAX+U41
- TLSH T1FA5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f0faf049deab749127abee6a9ee818a0_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f0faf049deab749127abee6a9ee818a0_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 380657276fb328f446ac4e1731c6d203063b968f118c798672b426212203277c
- MD5 f0faf049deab749127abee6a9ee818a0
- SHA1 7eef43211210b9901e37790c3b5bb30f08dc33c5
- SHA512 02fce671d73fbcae52efc1850882978bcd9c3b11476331cca5169aa50bbf035dd58be46f79f7a1bf75b0ab8d960b80b5352ccd3b8d1d8103903bc57bbfba6f41
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:dfBQGH6SfzoAX+U41
- TLSH T1FA5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.