General
- Target 2026-08-21_49aa4cd32631a0d65c0e56f670a20f38_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260822-s2qepahn7w
- SHA256 18135af24667b8aca8854f5e737027f18f12b6f568f60fd8da2b43b250fd15da
- MD5 49aa4cd32631a0d65c0e56f670a20f38
- SHA1 2dfcdbafb2ed3884cb49e4915baffa236b9bc637
- SHA512 da26f32810cf40e1179c258c30850ebe4d2fee0ce51c6788fe16a40ed8e175f59b5efaf092b71bdba7ad8e57038e7589c408568a752691c40af43c571b91c346
- SSDEEP 6144:dFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzV:6fBQGH6SfaoAX+U4l
- TLSH T1BD5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_49aa4cd32631a0d65c0e56f670a20f38_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_49aa4cd32631a0d65c0e56f670a20f38_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 18135af24667b8aca8854f5e737027f18f12b6f568f60fd8da2b43b250fd15da
- MD5 49aa4cd32631a0d65c0e56f670a20f38
- SHA1 2dfcdbafb2ed3884cb49e4915baffa236b9bc637
- SHA512 da26f32810cf40e1179c258c30850ebe4d2fee0ce51c6788fe16a40ed8e175f59b5efaf092b71bdba7ad8e57038e7589c408568a752691c40af43c571b91c346
- SSDEEP 6144:dFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzV:6fBQGH6SfaoAX+U4l
- TLSH T1BD5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.