General
- Target 2026-08-19_8094b1e185992ad4ef72e07094bc6b63_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260819-j5m93a11ht
- SHA256 eb18cce638f56fd3403b4f93d072d35eebbd8430cfc4baa9220dd50842373245
- MD5 8094b1e185992ad4ef72e07094bc6b63
- SHA1 18f2898acbc0dd6eeb66878b3c4a0f4fcf066443
- SHA512 2a6ff2376e7b47e05012acc62fa1779eb9a7f8e5309b1eed97c4922d3d71dc506c4cae8a7a16d45ef6fbed1ce7cb7d1c66cd3ca982efd465d6eb076f1ec32640
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bz1:mfBQGH6SfwoAX+U4F
- TLSH T19A5401917AA2D8B3C4429A3148A78F6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_8094b1e185992ad4ef72e07094bc6b63_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8094b1e185992ad4ef72e07094bc6b63_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 eb18cce638f56fd3403b4f93d072d35eebbd8430cfc4baa9220dd50842373245
- MD5 8094b1e185992ad4ef72e07094bc6b63
- SHA1 18f2898acbc0dd6eeb66878b3c4a0f4fcf066443
- SHA512 2a6ff2376e7b47e05012acc62fa1779eb9a7f8e5309b1eed97c4922d3d71dc506c4cae8a7a16d45ef6fbed1ce7cb7d1c66cd3ca982efd465d6eb076f1ec32640
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bz1:mfBQGH6SfwoAX+U4F
- TLSH T19A5401917AA2D8B3C4429A3148A78F6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.