General
- Target 2026-09-05_82493ae19f3ec6b955881804e262933b_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260907-sebysabq6w
- SHA256 1ba08bb11e239d1371ac6a66e803251579aa5b66a1ec042a2b4639c1cda0df4a
- MD5 82493ae19f3ec6b955881804e262933b
- SHA1 75ad582b9891a958e12c2f0c8e859123959b65f9
- SHA512 13ec951ddf976342c68e6a1beccd56ae83fd061096a2c25707564ab8c8eef702b27c7aa60e75e8ffd337c7c4e0f073fbb2b2ac8d70729c2ebd20768998e983e3
- SSDEEP 6144:CFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:FfBQGH6SfQoAX+U49
- TLSH T1905402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_82493ae19f3ec6b955881804e262933b_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_82493ae19f3ec6b955881804e262933b_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 1ba08bb11e239d1371ac6a66e803251579aa5b66a1ec042a2b4639c1cda0df4a
- MD5 82493ae19f3ec6b955881804e262933b
- SHA1 75ad582b9891a958e12c2f0c8e859123959b65f9
- SHA512 13ec951ddf976342c68e6a1beccd56ae83fd061096a2c25707564ab8c8eef702b27c7aa60e75e8ffd337c7c4e0f073fbb2b2ac8d70729c2ebd20768998e983e3
- SSDEEP 6144:CFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:FfBQGH6SfQoAX+U49
- TLSH T1905402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.