General
- Target 2026-09-01_3121e8a240c2833b295d03b4f6a26bc7_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260903-rff4fshg35
- SHA256 3638da94eff51f86693c71d64b4051c4eaa9cb02f81537a66d3e2d4586383975
- MD5 3121e8a240c2833b295d03b4f6a26bc7
- SHA1 cf18cf18efbde69d44b6c14518123a4872cbf944
- SHA512 ac47716400596ebbdd91d518b56033626c27666e91e36181d4028fc51ca8fc268b8a07fe0ed07f79e36adce01818290e4effc0832808cd1e3a2761658c7362c7
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:dfBQGH6SfNoAX+U49
- TLSH T1ED54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-01_3121e8a240c2833b295d03b4f6a26bc7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_3121e8a240c2833b295d03b4f6a26bc7_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 3638da94eff51f86693c71d64b4051c4eaa9cb02f81537a66d3e2d4586383975
- MD5 3121e8a240c2833b295d03b4f6a26bc7
- SHA1 cf18cf18efbde69d44b6c14518123a4872cbf944
- SHA512 ac47716400596ebbdd91d518b56033626c27666e91e36181d4028fc51ca8fc268b8a07fe0ed07f79e36adce01818290e4effc0832808cd1e3a2761658c7362c7
- SSDEEP 6144:6FlKgzelZNQSBQGH/CSpWqTJoAXjiU4bzN:dfBQGH6SfNoAX+U49
- TLSH T1ED54F1917DA2D8B3C0419A3148A6CBA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.