General
- Target 2026-08-16_9f75d183fd26b932208a1f128471b0ab_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260816-ek5amazwbs
- SHA256 72fe8103951ec7a7dcd18a918de8e4e8d0272cd30192089fa7241e2039b640b5
- MD5 9f75d183fd26b932208a1f128471b0ab
- SHA1 49ecf31ab9b86e80793950d71d0edc29bad74e1a
- SHA512 ffbc33a67921fee37251b05ee8979432a7eb918373156296d780768cb6f9cdb1afc465843c954014504da02e41d1610d4884982d234926d599eb86dd1a9413d0
- SSDEEP 6144:CFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:FfBQGH6SfNoAX+U49
- TLSH T15B54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_9f75d183fd26b932208a1f128471b0ab_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9f75d183fd26b932208a1f128471b0ab_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 72fe8103951ec7a7dcd18a918de8e4e8d0272cd30192089fa7241e2039b640b5
- MD5 9f75d183fd26b932208a1f128471b0ab
- SHA1 49ecf31ab9b86e80793950d71d0edc29bad74e1a
- SHA512 ffbc33a67921fee37251b05ee8979432a7eb918373156296d780768cb6f9cdb1afc465843c954014504da02e41d1610d4884982d234926d599eb86dd1a9413d0
- SSDEEP 6144:CFlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:FfBQGH6SfNoAX+U49
- TLSH T15B54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.