General
- Target 2026-08-15_779cbc16db38fed2ffde8920c751d54b_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- Sample260815-wmrwra1dpg
- SHA256 16eb8e8e60863da890975077f597642932a681b4eee60580b123fda82be4e485
- MD5 779cbc16db38fed2ffde8920c751d54b
- SHA1 b17750017d837072dbd8068dbeb75e8ef98c824a
- SHA512 21d6fde6a6b09a64e8a179f578895ef8afe6a9cec0296bd3a40690cb428a377bc0fd9e336b6aefe3aec5b34cb87568249b85943f44078e723dbbc12f31d833ca
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTLHHHHHHHuoAXjiU4bz:CfBQGH6Sf3HHHHHHHuoAX+U4
- TLSH T189A5A5E42740A76DE5F30A3A0655857423F73E8B7C9E72B26D55370BAA30960B7CB20D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_779cbc16db38fed2ffde8920c751d54b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_779cbc16db38fed2ffde8920c751d54b_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- SHA256 16eb8e8e60863da890975077f597642932a681b4eee60580b123fda82be4e485
- MD5 779cbc16db38fed2ffde8920c751d54b
- SHA1 b17750017d837072dbd8068dbeb75e8ef98c824a
- SHA512 21d6fde6a6b09a64e8a179f578895ef8afe6a9cec0296bd3a40690cb428a377bc0fd9e336b6aefe3aec5b34cb87568249b85943f44078e723dbbc12f31d833ca
- SSDEEP 6144:FFlKgzelZNQSBQGH/CSpWqTLHHHHHHHuoAXjiU4bz:CfBQGH6Sf3HHHHHHHuoAX+U4
- TLSH T189A5A5E42740A76DE5F30A3A0655857423F73E8B7C9E72B26D55370BAA30960B7CB20D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.