General
- Target 2026-08-23_df8f40b7d85e01b995359d3c6715a3c7_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260823-wq337aah96
- SHA256 89c42ffa511e346bb4858aa9eb5cea77f70325b8e87618e3785d3c34c5306671
- MD5 df8f40b7d85e01b995359d3c6715a3c7
- SHA1 a93fc5745af2368cc5c083b089eda3d71a8c71e3
- SHA512 8b70949fa13896e1d849e75a8ae70041af0fecb2a93442f591a4e3bcef5e0f616b711c32b8829e5eba9eaa0538558489ad235382a9b6991bc5e337e4be4f2dc8
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqTioAXjiU4bzF:xfBQGH6SfWoAX+U41
- TLSH T1F35401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_df8f40b7d85e01b995359d3c6715a3c7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_df8f40b7d85e01b995359d3c6715a3c7_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 89c42ffa511e346bb4858aa9eb5cea77f70325b8e87618e3785d3c34c5306671
- MD5 df8f40b7d85e01b995359d3c6715a3c7
- SHA1 a93fc5745af2368cc5c083b089eda3d71a8c71e3
- SHA512 8b70949fa13896e1d849e75a8ae70041af0fecb2a93442f591a4e3bcef5e0f616b711c32b8829e5eba9eaa0538558489ad235382a9b6991bc5e337e4be4f2dc8
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqTioAXjiU4bzF:xfBQGH6SfWoAX+U41
- TLSH T1F35401917DA2D8B3C0419A3188A6CBA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.