General
- Target 2026-08-19_c54ad0d0be587e22b43c39034a5b08c5_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260819-v8chhszakb
- SHA256 9a9f6598d6191aab8ab998ca7fa63605ff0e988c8d9689493d9c18c2f677da37
- MD5 c54ad0d0be587e22b43c39034a5b08c5
- SHA1 36ffa8f59a5663ffd1fce82256cdd331f484468e
- SHA512 fed685fdc63839772c6ddaa4b5280c16b73040fabea2a40a3cccdfbb5849e2734e6cc17bc578ca5e06026b9a49faae4e710c5e028e2dd145a0d7dc787db1d858
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:VfBQGH6SfBoAX+U4l
- TLSH T17C54F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_c54ad0d0be587e22b43c39034a5b08c5_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c54ad0d0be587e22b43c39034a5b08c5_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 9a9f6598d6191aab8ab998ca7fa63605ff0e988c8d9689493d9c18c2f677da37
- MD5 c54ad0d0be587e22b43c39034a5b08c5
- SHA1 36ffa8f59a5663ffd1fce82256cdd331f484468e
- SHA512 fed685fdc63839772c6ddaa4b5280c16b73040fabea2a40a3cccdfbb5849e2734e6cc17bc578ca5e06026b9a49faae4e710c5e028e2dd145a0d7dc787db1d858
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:VfBQGH6SfBoAX+U4l
- TLSH T17C54F1917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.