General
- Target 2026-08-23_22a0e8e3355e867c64251fea27492052_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260824-s6ffaazgld
- SHA256 14ebb918cebf164b818b12ede4a5b9865ecc90fd3fd4766e97da0fa0100acab0
- MD5 22a0e8e3355e867c64251fea27492052
- SHA1 846b7692ddfd1ff77906289597ad27ae4dcebdea
- SHA512 d43bd4c45d6943445e9c76082c770348ff78094a50ef63e359f2cf6e4e2509fa84d0b150a19010c1256a6139795683f20896e0a0b7eafc60bcdf0df0fde53f48
- SSDEEP 6144:bFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:kfBQGH6SfRoAX+U4l
- TLSH T19E5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_22a0e8e3355e867c64251fea27492052_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_22a0e8e3355e867c64251fea27492052_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 14ebb918cebf164b818b12ede4a5b9865ecc90fd3fd4766e97da0fa0100acab0
- MD5 22a0e8e3355e867c64251fea27492052
- SHA1 846b7692ddfd1ff77906289597ad27ae4dcebdea
- SHA512 d43bd4c45d6943445e9c76082c770348ff78094a50ef63e359f2cf6e4e2509fa84d0b150a19010c1256a6139795683f20896e0a0b7eafc60bcdf0df0fde53f48
- SSDEEP 6144:bFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:kfBQGH6SfRoAX+U4l
- TLSH T19E5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.