General
- Target 2026-08-15_f4fe10a0ef5a7b0cfe884b3282076491_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-vyevwsem2z
- SHA256 41026f2eaf112fe47a6c7da855716b90d6dea106a3b5740ee027c083cc1b40a3
- MD5 f4fe10a0ef5a7b0cfe884b3282076491
- SHA1 a6f08f9ce365bcc32dc8e6ef6e007e9a13078fa7
- SHA512 fa435885b25a4b33999b1c77c1ca38a6f2eef8ec204093c0c08ad49e3cf447a795422da21b8a42048d1131633989f7b28ac17e5e52274e0dd7561fca34396280
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzF:ZfBQGH6Sf0oAX+U41
- TLSH T12E5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f4fe10a0ef5a7b0cfe884b3282076491_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f4fe10a0ef5a7b0cfe884b3282076491_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 41026f2eaf112fe47a6c7da855716b90d6dea106a3b5740ee027c083cc1b40a3
- MD5 f4fe10a0ef5a7b0cfe884b3282076491
- SHA1 a6f08f9ce365bcc32dc8e6ef6e007e9a13078fa7
- SHA512 fa435885b25a4b33999b1c77c1ca38a6f2eef8ec204093c0c08ad49e3cf447a795422da21b8a42048d1131633989f7b28ac17e5e52274e0dd7561fca34396280
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTwoAXjiU4bzF:ZfBQGH6Sf0oAX+U41
- TLSH T12E5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.