General
- Target 2026-08-25_d562eacf0257af2822640e739ddf959a_elex_rhadamanthys_smoke-loader
- Size 333KB
- Sample260826-h89f2a1vdw
- SHA256 ff10875d8f91073b5ab940d1b684c9a981700ec1ce6a57211ea590bee5fef8a3
- MD5 d562eacf0257af2822640e739ddf959a
- SHA1 9484e27b92c59ffc340ad95d475de98281682954
- SHA512 0148281d26651525acb1dea44a7ce5a6c98fd9fc89247d1490ac88b54d575e3d4677a28e3d72c771258414f7dc2e16b2b4956061ed1fbe52caccd1da1c7253c2
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTzwToAXjiU4bz:ZfBQGH6SfYToAX+U4
- TLSH T1E374E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_d562eacf0257af2822640e739ddf959a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_d562eacf0257af2822640e739ddf959a_elex_rhadamanthys_smoke-loader
- Size 333KB
- SHA256 ff10875d8f91073b5ab940d1b684c9a981700ec1ce6a57211ea590bee5fef8a3
- MD5 d562eacf0257af2822640e739ddf959a
- SHA1 9484e27b92c59ffc340ad95d475de98281682954
- SHA512 0148281d26651525acb1dea44a7ce5a6c98fd9fc89247d1490ac88b54d575e3d4677a28e3d72c771258414f7dc2e16b2b4956061ed1fbe52caccd1da1c7253c2
- SSDEEP 6144:eFlKgzelZNQSBQGH/CSpWqTzwToAXjiU4bz:ZfBQGH6SfYToAX+U4
- TLSH T1E374E0403A9ECBB2D3C249318C6EFAA157767C2F9B65D133F7983B0F1E712845A66201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.