General
- Target 2026-08-16_b2a591a0ab5674200f9ecb91aab40bad_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260816-vmjppsef99
- SHA256 a0ca681eb833389ef131d9ff94aad9a3b5389e08a4f740b31a19bdada25139c9
- MD5 b2a591a0ab5674200f9ecb91aab40bad
- SHA1 ea3c666eb803088e038b521254761e73f71bd21c
- SHA512 09d6baf16541dc7ad2f389b023dcc59664a6dcf237a8624a77b1fa797067f220997e869e5a7ae48b49a494170829c5e839d99677906897081309697449a0e9b1
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:zfBQGH6SfRoAX+U4l
- TLSH T17D5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_b2a591a0ab5674200f9ecb91aab40bad_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b2a591a0ab5674200f9ecb91aab40bad_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 a0ca681eb833389ef131d9ff94aad9a3b5389e08a4f740b31a19bdada25139c9
- MD5 b2a591a0ab5674200f9ecb91aab40bad
- SHA1 ea3c666eb803088e038b521254761e73f71bd21c
- SHA512 09d6baf16541dc7ad2f389b023dcc59664a6dcf237a8624a77b1fa797067f220997e869e5a7ae48b49a494170829c5e839d99677906897081309697449a0e9b1
- SSDEEP 6144:0FlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:zfBQGH6SfRoAX+U4l
- TLSH T17D5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.