General
- Target 2026-08-24_7c0a29ae0c3682f6ec6a12b64c3e3da7_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260825-lpp5tszdmg
- SHA256 d706d9dfbcdec5c3427a7b2c78b397b93563078be54a9f86a81a721cce9fcdf5
- MD5 7c0a29ae0c3682f6ec6a12b64c3e3da7
- SHA1 ec5d17c48b5984ed2cd61afc7972cc6da6520854
- SHA512 64c3acb98b225a3ad12bbcca930f82728efc3e919bb49f87e351d03209e5e98aacda63862e477bce0d8ac188a61528b2f0f93b952129b352ac355e0a43c13006
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:EfBQGH6SfuoAX+U41
- TLSH T1795402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_7c0a29ae0c3682f6ec6a12b64c3e3da7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_7c0a29ae0c3682f6ec6a12b64c3e3da7_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 d706d9dfbcdec5c3427a7b2c78b397b93563078be54a9f86a81a721cce9fcdf5
- MD5 7c0a29ae0c3682f6ec6a12b64c3e3da7
- SHA1 ec5d17c48b5984ed2cd61afc7972cc6da6520854
- SHA512 64c3acb98b225a3ad12bbcca930f82728efc3e919bb49f87e351d03209e5e98aacda63862e477bce0d8ac188a61528b2f0f93b952129b352ac355e0a43c13006
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:EfBQGH6SfuoAX+U41
- TLSH T1795402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.