General
- Target 2026-08-16_5416b60c0cf184efa64771aa4f5f494e_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260816-wme7ysfa54
- SHA256 a6fbd1c862b2d378e0090f8b72976184f9d3cc52a326c7fa17c03ce92b851531
- MD5 5416b60c0cf184efa64771aa4f5f494e
- SHA1 88fff8a86cffd956a39f02714b401ca6a2a829f3
- SHA512 26862fc0014965d5eb838e51bf7fbf236b36ff3b1a085e513e147325317ecac8b8a4392c73fe0b48dac8a7ead7fd82a9aef0e820ef24284a56025b269501e00c
- SSDEEP 6144:VFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:yfBQGH6SfxoAX+U49
- TLSH T12B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_5416b60c0cf184efa64771aa4f5f494e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_5416b60c0cf184efa64771aa4f5f494e_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 a6fbd1c862b2d378e0090f8b72976184f9d3cc52a326c7fa17c03ce92b851531
- MD5 5416b60c0cf184efa64771aa4f5f494e
- SHA1 88fff8a86cffd956a39f02714b401ca6a2a829f3
- SHA512 26862fc0014965d5eb838e51bf7fbf236b36ff3b1a085e513e147325317ecac8b8a4392c73fe0b48dac8a7ead7fd82a9aef0e820ef24284a56025b269501e00c
- SSDEEP 6144:VFlKgzelZNQSBQGH/CSpWqTFoAXjiU4bzN:yfBQGH6SfxoAX+U49
- TLSH T12B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.