General
- Target 2026-09-07_2f345b5b046400ee7f93fb8af27c3520_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260909-e4se6s1yds
- SHA256 7385381df5268f5f8cf6e1e5d03c5ab3772a8d80ef0c28a6f0c7af7b4015f1d9
- MD5 2f345b5b046400ee7f93fb8af27c3520
- SHA1 2df8f87b5911fd85b3b1aaaee6c6485cc132ee4d
- SHA512 0a0b4fbc1a46335c456fe6e6f19eb1480859feed27c80b28de8352fe75fe3b3aa137f8e9ee8c706cc7d21bd95c0dd88c116bd2a1568130d53d15b4e82cae9c82
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:0fBQGH6SfRoAX+U4l
- TLSH T1365402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_2f345b5b046400ee7f93fb8af27c3520_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_2f345b5b046400ee7f93fb8af27c3520_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 7385381df5268f5f8cf6e1e5d03c5ab3772a8d80ef0c28a6f0c7af7b4015f1d9
- MD5 2f345b5b046400ee7f93fb8af27c3520
- SHA1 2df8f87b5911fd85b3b1aaaee6c6485cc132ee4d
- SHA512 0a0b4fbc1a46335c456fe6e6f19eb1480859feed27c80b28de8352fe75fe3b3aa137f8e9ee8c706cc7d21bd95c0dd88c116bd2a1568130d53d15b4e82cae9c82
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:0fBQGH6SfRoAX+U4l
- TLSH T1365402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.