General
- Target 2026-08-21_96233ea555339d846161d653038edb20_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- Sample260821-f2am1stdrd
- SHA256 1bdd5f97ed6c9e7620a8d0249d4f2090073486d4b5a303fc907ca98c8c04ce4c
- MD5 96233ea555339d846161d653038edb20
- SHA1 4c8f416e5808244ce99441e309cbae2032b693c1
- SHA512 c819b100512652993df01bf148b7f525ef6f050a6cd8b6c4ee68b40b4c286e8649a80973ff8b6ab439c67724f730ec5c1fbcef334435e271cb4a104b05971be9
- SSDEEP 24576:Wfa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xa9:WfayQL9fpTgTZ0og6fWLb+VOa/hunKhv
- TLSH T1BE65DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_96233ea555339d846161d653038edb20_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_96233ea555339d846161d653038edb20_elex_rhadamanthys_smoke-loader
- Size 1.4MB
- SHA256 1bdd5f97ed6c9e7620a8d0249d4f2090073486d4b5a303fc907ca98c8c04ce4c
- MD5 96233ea555339d846161d653038edb20
- SHA1 4c8f416e5808244ce99441e309cbae2032b693c1
- SHA512 c819b100512652993df01bf148b7f525ef6f050a6cd8b6c4ee68b40b4c286e8649a80973ff8b6ab439c67724f730ec5c1fbcef334435e271cb4a104b05971be9
- SSDEEP 24576:Wfa86Sf7kQ5W9GIpThCTZ0og6f5MLb+VONw/haSqnFGUMhglHZaaw+Xa9:WfayQL9fpTgTZ0og6fWLb+VOa/hunKhv
- TLSH T1BE65DFC2F602D0A5DC1645308C27DFF81B16BE22AD1116177BD8BF5FAEB3382592259B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.