General
- Target 2026-08-21_20f44d8461bd26b01d302454ba7cb05c_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260822-wk51laap7t
- SHA256 026f8a663fce54ddca10e332ef41945bbe2ed0f955bb0b15d8d962b5052fa983
- MD5 20f44d8461bd26b01d302454ba7cb05c
- SHA1 fbadbf1a66ef476515f21a24f7dc2b22cee23069
- SHA512 60043ba914063f7f404afb95c7a7d203ab372c342b862f3c3bb38462c2146bc4b9ec8f08720329ec61b3f25e8f7bf5e7b16a414c203a3ded01d42a0355e1baa3
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:9fBQGH6SfuoAX+U41
- TLSH T1295402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_20f44d8461bd26b01d302454ba7cb05c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_20f44d8461bd26b01d302454ba7cb05c_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 026f8a663fce54ddca10e332ef41945bbe2ed0f955bb0b15d8d962b5052fa983
- MD5 20f44d8461bd26b01d302454ba7cb05c
- SHA1 fbadbf1a66ef476515f21a24f7dc2b22cee23069
- SHA512 60043ba914063f7f404afb95c7a7d203ab372c342b862f3c3bb38462c2146bc4b9ec8f08720329ec61b3f25e8f7bf5e7b16a414c203a3ded01d42a0355e1baa3
- SSDEEP 6144:aFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:9fBQGH6SfuoAX+U41
- TLSH T1295402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.