General
- Target 2026-08-18_abcbcb222ace2faaba6258fe8af0be3a_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260818-vmsydaxyex
- SHA256 be40e6c6b2390042effe78b84a4a58fb0bdc39b6d058690b813af29bbdd35942
- MD5 abcbcb222ace2faaba6258fe8af0be3a
- SHA1 fe51f3900a77c754b7705ae7bb1a4e7b98cb3332
- SHA512 73db926369b71db4a67e953d0ac0cb932592b6b064a784441c375fda9ba3f1cfa53c8f5a00be86e8a8ac22bd07e2593a4d8b2488745552d318c97dc8b99bf25d
- SSDEEP 6144:9FlKgzelZNQSBQGH/CSpWqTfueF/mNyBqoAXjiU4bz:afBQGH6SfaCBqoAX+U4
- TLSH T13A75CFB17B93856BD4E7C23CB1858593ABF69B031D539263D7A0EE3DCA392814DD8C42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_abcbcb222ace2faaba6258fe8af0be3a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_abcbcb222ace2faaba6258fe8af0be3a_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 be40e6c6b2390042effe78b84a4a58fb0bdc39b6d058690b813af29bbdd35942
- MD5 abcbcb222ace2faaba6258fe8af0be3a
- SHA1 fe51f3900a77c754b7705ae7bb1a4e7b98cb3332
- SHA512 73db926369b71db4a67e953d0ac0cb932592b6b064a784441c375fda9ba3f1cfa53c8f5a00be86e8a8ac22bd07e2593a4d8b2488745552d318c97dc8b99bf25d
- SSDEEP 6144:9FlKgzelZNQSBQGH/CSpWqTfueF/mNyBqoAXjiU4bz:afBQGH6SfaCBqoAX+U4
- TLSH T13A75CFB17B93856BD4E7C23CB1858593ABF69B031D539263D7A0EE3DCA392814DD8C42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.