General
- Target 2026-08-15_150c990d3c34e09269ef18598aa5067b_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-w67fjsfm6w
- SHA256 39fc639e4b91ee8948e09ecda8e7f0a4826d8adbee92e984e95930c95048f125
- MD5 150c990d3c34e09269ef18598aa5067b
- SHA1 0bfd87db5b9c1b86a08d956802e3f03e13141cac
- SHA512 8fd4decba1341d3d6871c894baaec06e51386369783179c55470566ddf776bf8791ee9f47d31dc72fec89c88134b5e3971bd910ef64f9163098a71f770f3ea59
- SSDEEP 6144:8FlKgzelZNQSBQGH/CSpWqTToAXjiU4bzV:bfBQGH6SfnoAX+U4l
- TLSH T18154F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_150c990d3c34e09269ef18598aa5067b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_150c990d3c34e09269ef18598aa5067b_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 39fc639e4b91ee8948e09ecda8e7f0a4826d8adbee92e984e95930c95048f125
- MD5 150c990d3c34e09269ef18598aa5067b
- SHA1 0bfd87db5b9c1b86a08d956802e3f03e13141cac
- SHA512 8fd4decba1341d3d6871c894baaec06e51386369783179c55470566ddf776bf8791ee9f47d31dc72fec89c88134b5e3971bd910ef64f9163098a71f770f3ea59
- SSDEEP 6144:8FlKgzelZNQSBQGH/CSpWqTToAXjiU4bzV:bfBQGH6SfnoAX+U4l
- TLSH T18154F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.