General
- Target 2026-08-25_e7398f626c635a7623fed8cd4e8eaaaf_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260826-e6ks4sgm31
- SHA256 9754d76f2516c05d2c08543db1c48c0bd284408954ed87608ac040fd70cd4c23
- MD5 e7398f626c635a7623fed8cd4e8eaaaf
- SHA1 0da431a5a25526de5d5a8f5294490fefbfb0d38f
- SHA512 e55d3375e4d407ecb15ad55d8b0cfeedb0734c90f6c8f3855c6d73a2827639854dbbe7b17f3822e45608ce95b6f41fb5b11786ecba997f58dbec7a3cad5d3976
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzF:vfBQGH6Sf0oAX+U41
- TLSH T1FF54F1457DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_e7398f626c635a7623fed8cd4e8eaaaf_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e7398f626c635a7623fed8cd4e8eaaaf_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 9754d76f2516c05d2c08543db1c48c0bd284408954ed87608ac040fd70cd4c23
- MD5 e7398f626c635a7623fed8cd4e8eaaaf
- SHA1 0da431a5a25526de5d5a8f5294490fefbfb0d38f
- SHA512 e55d3375e4d407ecb15ad55d8b0cfeedb0734c90f6c8f3855c6d73a2827639854dbbe7b17f3822e45608ce95b6f41fb5b11786ecba997f58dbec7a3cad5d3976
- SSDEEP 6144:YFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzF:vfBQGH6Sf0oAX+U41
- TLSH T1FF54F1457DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.