General
- Target 2026-08-23_9c7808cd2d0f38cbdcb0bd655bcfac2a_elex_rhadamanthys_smoke-loader
- Size 312KB
- Sample260824-ejptjsxzfx
- SHA256 60d7bca6203f86cf3637e81e8a41827f9227dae1c6e31ddd959c0b68f65dd354
- MD5 9c7808cd2d0f38cbdcb0bd655bcfac2a
- SHA1 34cd7047056b85080f110ed20b0e8bb822d7bdf6
- SHA512 bb36962850c48349f741300a01eb98913b2958a49fa1ae0dd0db4047d03c0f1285cb383ded72bdc0c6abd9b35ccfb99e3d8902c1ac7d600047a968e6c148caa2
- SSDEEP 6144:pFlKgzelZNQSBQGH/CSpWqTnUjD5yoAXjiU4bz:efBQGH6SfzUjD5yoAX+U4
- TLSH T1C564F1427EA2D8F2D44146315C67CF719737BC279AA4D203B7A93B4BAE713909B3B205
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_9c7808cd2d0f38cbdcb0bd655bcfac2a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9c7808cd2d0f38cbdcb0bd655bcfac2a_elex_rhadamanthys_smoke-loader
- Size 312KB
- SHA256 60d7bca6203f86cf3637e81e8a41827f9227dae1c6e31ddd959c0b68f65dd354
- MD5 9c7808cd2d0f38cbdcb0bd655bcfac2a
- SHA1 34cd7047056b85080f110ed20b0e8bb822d7bdf6
- SHA512 bb36962850c48349f741300a01eb98913b2958a49fa1ae0dd0db4047d03c0f1285cb383ded72bdc0c6abd9b35ccfb99e3d8902c1ac7d600047a968e6c148caa2
- SSDEEP 6144:pFlKgzelZNQSBQGH/CSpWqTnUjD5yoAXjiU4bz:efBQGH6SfzUjD5yoAX+U4
- TLSH T1C564F1427EA2D8F2D44146315C67CF719737BC279AA4D203B7A93B4BAE713909B3B205
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.