General
- Target 2026-08-19_7ebae8ee869db0c330011584159e052c_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- Sample260819-xgqbeaha99
- SHA256 497bbc8c5e69dcb057f02a19f17fa19c839897062b2b8d09f33105c9f7a3d524
- MD5 7ebae8ee869db0c330011584159e052c
- SHA1 b82fc061b3f1a2633d7d3c5670a3ae0c54ae07d8
- SHA512 b80399e9197ccdabd3cc06c7ffed56d7901e052192e22f010bca31f6c36a1b946dd2b60090bbd9b05192c87ac6d989f6654993179660e65acd8783a5104db804
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTLHHHHHHHuoAXjiU4bz:+fBQGH6Sf3HHHHHHHuoAX+U4
- TLSH T12EA5A5E42740A76DE5F30A3A0655857423F73E8B7C9E72B26D55370BAA30960B7CB20D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_7ebae8ee869db0c330011584159e052c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7ebae8ee869db0c330011584159e052c_elex_rhadamanthys_smoke-loader
- Size 2.1MB
- SHA256 497bbc8c5e69dcb057f02a19f17fa19c839897062b2b8d09f33105c9f7a3d524
- MD5 7ebae8ee869db0c330011584159e052c
- SHA1 b82fc061b3f1a2633d7d3c5670a3ae0c54ae07d8
- SHA512 b80399e9197ccdabd3cc06c7ffed56d7901e052192e22f010bca31f6c36a1b946dd2b60090bbd9b05192c87ac6d989f6654993179660e65acd8783a5104db804
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTLHHHHHHHuoAXjiU4bz:+fBQGH6Sf3HHHHHHHuoAX+U4
- TLSH T12EA5A5E42740A76DE5F30A3A0655857423F73E8B7C9E72B26D55370BAA30960B7CB20D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.