General
- Target 2026-08-18_59cdfaca1ef2588c03c99773c512ac6b_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260818-wgen8ser8x
- SHA256 b2eeca158f1409ae3a4ef7fcb41b731e7b99411821b5053c3c4ea4a0acc98e45
- MD5 59cdfaca1ef2588c03c99773c512ac6b
- SHA1 a6353dd748d3518d1f48bc2a01d685ae53d1da0e
- SHA512 a8fc0030c38c46c7750acfdc86292270a60bf82cccbbfacf4fbef2ce08b8dfa48e742e2dbf6d17f222e44a179a4b4a39ad8ca8eb86ab10f42a36063bb3e6effe
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTdoAXjiU4bz:AfBQGH6SfJoAX+U4
- TLSH T1C96501817AA2D8B3C4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_59cdfaca1ef2588c03c99773c512ac6b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_59cdfaca1ef2588c03c99773c512ac6b_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 b2eeca158f1409ae3a4ef7fcb41b731e7b99411821b5053c3c4ea4a0acc98e45
- MD5 59cdfaca1ef2588c03c99773c512ac6b
- SHA1 a6353dd748d3518d1f48bc2a01d685ae53d1da0e
- SHA512 a8fc0030c38c46c7750acfdc86292270a60bf82cccbbfacf4fbef2ce08b8dfa48e742e2dbf6d17f222e44a179a4b4a39ad8ca8eb86ab10f42a36063bb3e6effe
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTdoAXjiU4bz:AfBQGH6SfJoAX+U4
- TLSH T1C96501817AA2D8B3C4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.