General
- Target 2026-08-19_e0e68ddb7e13a252e94aaf07e1539769_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260819-vpt88ayerg
- SHA256 3405ab2cda5a3fd4d48e291e3ab48418f26259d9e5f95b26f614865eb1d43e95
- MD5 e0e68ddb7e13a252e94aaf07e1539769
- SHA1 84b39dd14a9dc5a2457f82aba598a732bfecef86
- SHA512 ba20657e3fd2f76e9bae3d1de6fb79504706be4ba52a8e92ec4f8657c8803afc779692b778350c6f9ddfc417958dd332eec7b5c30d9a5d6bd45f123524392557
- SSDEEP 6144:NFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:KfBQGH6SfuoAX+U41
- TLSH T1DC5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_e0e68ddb7e13a252e94aaf07e1539769_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e0e68ddb7e13a252e94aaf07e1539769_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 3405ab2cda5a3fd4d48e291e3ab48418f26259d9e5f95b26f614865eb1d43e95
- MD5 e0e68ddb7e13a252e94aaf07e1539769
- SHA1 84b39dd14a9dc5a2457f82aba598a732bfecef86
- SHA512 ba20657e3fd2f76e9bae3d1de6fb79504706be4ba52a8e92ec4f8657c8803afc779692b778350c6f9ddfc417958dd332eec7b5c30d9a5d6bd45f123524392557
- SSDEEP 6144:NFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:KfBQGH6SfuoAX+U41
- TLSH T1DC5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.