General
- Target 2026-08-27_e7bb917ee2e4faaf35d351d8130e58f6_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260828-dyndlashma
- SHA256 c4eb19ff633ec08b96b3c4da9dc7f37b2532113b8f974fcb4bdf9062a8d97c44
- MD5 e7bb917ee2e4faaf35d351d8130e58f6
- SHA1 7e7d7cf7bb49aa78d8a90c3d1219566967751b89
- SHA512 33f95986f55487d71d4a1bc767621521573689f830d4ff8133c6018261bc52710e357033691c05f030600ea5edbc4e83bf4bd9e58772028a78e6f468821a3f0e
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTdoAXjiU4bz:dfBQGH6SfJoAX+U4
- TLSH T1746501817AA2D8B3C4429A314CA6CF6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_e7bb917ee2e4faaf35d351d8130e58f6_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_e7bb917ee2e4faaf35d351d8130e58f6_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 c4eb19ff633ec08b96b3c4da9dc7f37b2532113b8f974fcb4bdf9062a8d97c44
- MD5 e7bb917ee2e4faaf35d351d8130e58f6
- SHA1 7e7d7cf7bb49aa78d8a90c3d1219566967751b89
- SHA512 33f95986f55487d71d4a1bc767621521573689f830d4ff8133c6018261bc52710e357033691c05f030600ea5edbc4e83bf4bd9e58772028a78e6f468821a3f0e
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTdoAXjiU4bz:dfBQGH6SfJoAX+U4
- TLSH T1746501817AA2D8B3C4429A314CA6CF6197377D139A65D203B7AD1F4B2F713D09B7A302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.