General
- Target 2026-08-18_cfd918b01a61cde5aa25278e5195691a_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260818-vae6raxwdw
- SHA256 56878303419fe2c7262fa921c933b223700cf7f5554156331f86244543060141
- MD5 cfd918b01a61cde5aa25278e5195691a
- SHA1 dd4e3c7f95a23a92074450695513804b81948ce3
- SHA512 bec5fed3ecb2f86ca3671a9bd9a274cf4f043ad93812567e448fe4eeeb993dbbc3aacc6ed21dc329e3f5db29477d696ab6daef141b157e7c6e1d225988bce071
- SSDEEP 6144:5FlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:OfBQGH6SfYoAX+U41
- TLSH T1095401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_cfd918b01a61cde5aa25278e5195691a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_cfd918b01a61cde5aa25278e5195691a_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 56878303419fe2c7262fa921c933b223700cf7f5554156331f86244543060141
- MD5 cfd918b01a61cde5aa25278e5195691a
- SHA1 dd4e3c7f95a23a92074450695513804b81948ce3
- SHA512 bec5fed3ecb2f86ca3671a9bd9a274cf4f043ad93812567e448fe4eeeb993dbbc3aacc6ed21dc329e3f5db29477d696ab6daef141b157e7c6e1d225988bce071
- SSDEEP 6144:5FlKgzelZNQSBQGH/CSpWqTcoAXjiU4bzF:OfBQGH6SfYoAX+U41
- TLSH T1095401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.