General
- Target 2026-08-30_610e9947c2e672e34a4d063db9cf974e_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260831-mplcbahj41
- SHA256 a502dc8eaa3d62a31dc6262b439b7dc85ab97d7cb2ad72c345efc61d2a43c162
- MD5 610e9947c2e672e34a4d063db9cf974e
- SHA1 b8bbe65fdb40a4d3c812bd1e55cb1d6b62240598
- SHA512 36e4c0984a8c8a42b34da74102e0ef7e9c98be9bca4e4f695384df5acce110f83e67089e292bcd4f4c03115384db71fa793246c80bd46d585e8bd54d64974ca9
- SSDEEP 6144:/FlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:wfBQGH6SfOoAX+U41
- TLSH T16B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_610e9947c2e672e34a4d063db9cf974e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_610e9947c2e672e34a4d063db9cf974e_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 a502dc8eaa3d62a31dc6262b439b7dc85ab97d7cb2ad72c345efc61d2a43c162
- MD5 610e9947c2e672e34a4d063db9cf974e
- SHA1 b8bbe65fdb40a4d3c812bd1e55cb1d6b62240598
- SHA512 36e4c0984a8c8a42b34da74102e0ef7e9c98be9bca4e4f695384df5acce110f83e67089e292bcd4f4c03115384db71fa793246c80bd46d585e8bd54d64974ca9
- SSDEEP 6144:/FlKgzelZNQSBQGH/CSpWqT6oAXjiU4bzF:wfBQGH6SfOoAX+U41
- TLSH T16B5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.