General
- Target 2026-08-15_9909439d540dbd0065aba8eacc90b914_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260815-wf2sdaeq2s
- SHA256 054877844fb840d837080ade30dea17c5203b0a638179ed06cd685e33cc31ce8
- MD5 9909439d540dbd0065aba8eacc90b914
- SHA1 fbfbef2b1bf9b13496d61d8fbdcb9f0de6eb3354
- SHA512 bbca9e2f89fc609ce915148a762cd6e29a054287f0f584828f4bb64b7111b9cf8d75d7d34757016a291fc3416b5cfbb2fac99378e2d3600d020880a6481265a2
- SSDEEP 6144:kFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:DfBQGH6SfxoAX+U49
- TLSH T1715402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_9909439d540dbd0065aba8eacc90b914_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_9909439d540dbd0065aba8eacc90b914_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 054877844fb840d837080ade30dea17c5203b0a638179ed06cd685e33cc31ce8
- MD5 9909439d540dbd0065aba8eacc90b914
- SHA1 fbfbef2b1bf9b13496d61d8fbdcb9f0de6eb3354
- SHA512 bbca9e2f89fc609ce915148a762cd6e29a054287f0f584828f4bb64b7111b9cf8d75d7d34757016a291fc3416b5cfbb2fac99378e2d3600d020880a6481265a2
- SSDEEP 6144:kFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:DfBQGH6SfxoAX+U49
- TLSH T1715402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.