General
- Target 2026-08-19_c410e803dd0cab1fdadba679a92b7f30_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260819-v8zcaazamb
- SHA256 3247e14f1798535cae14cd8e9bbfd4dd4fd2de9e06b3c9a1cc5bdfd8c743f450
- MD5 c410e803dd0cab1fdadba679a92b7f30
- SHA1 394e342b95b8b2d8962e7c322845cd415d8c8fdb
- SHA512 3d0e52bb5b0c2d811ebbb45d058ba23cb9f5da540ff81baaf4aec0b158c0b8b5d281a676d05beb233395adfee9fa4499136eb7e5283a3c29a96c36b937e7ef7e
- SSDEEP 6144:BFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzN:WfBQGH6SfuoAX+U49
- TLSH T19D5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_c410e803dd0cab1fdadba679a92b7f30_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c410e803dd0cab1fdadba679a92b7f30_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 3247e14f1798535cae14cd8e9bbfd4dd4fd2de9e06b3c9a1cc5bdfd8c743f450
- MD5 c410e803dd0cab1fdadba679a92b7f30
- SHA1 394e342b95b8b2d8962e7c322845cd415d8c8fdb
- SHA512 3d0e52bb5b0c2d811ebbb45d058ba23cb9f5da540ff81baaf4aec0b158c0b8b5d281a676d05beb233395adfee9fa4499136eb7e5283a3c29a96c36b937e7ef7e
- SSDEEP 6144:BFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzN:WfBQGH6SfuoAX+U49
- TLSH T19D5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.