General
- Target 2026-09-08_b8f17364ecbec71eac14e16c5b7b8be8_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample260910-dpd4kavgja
- SHA256 b69681b0009a2ec9c0388a61086686fb8949b2a65424e30bf666ecc101bcd398
- MD5 b8f17364ecbec71eac14e16c5b7b8be8
- SHA1 f112f0326e176df214f8460c2ba179bde2362347
- SHA512 14707f859a5bdedd4499b7903ba55ed9cbe2b9f8b159c9c19d17eaf70fcc55ca45c7afd48efa95692ee10422d2e0ad6ead24eb5f871c0edb33de35c86c897a3e
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzN:0fBQGH6SfIoAX+U49
- TLSH T1345402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_b8f17364ecbec71eac14e16c5b7b8be8_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_b8f17364ecbec71eac14e16c5b7b8be8_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 b69681b0009a2ec9c0388a61086686fb8949b2a65424e30bf666ecc101bcd398
- MD5 b8f17364ecbec71eac14e16c5b7b8be8
- SHA1 f112f0326e176df214f8460c2ba179bde2362347
- SHA512 14707f859a5bdedd4499b7903ba55ed9cbe2b9f8b159c9c19d17eaf70fcc55ca45c7afd48efa95692ee10422d2e0ad6ead24eb5f871c0edb33de35c86c897a3e
- SSDEEP 6144:LFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzN:0fBQGH6SfIoAX+U49
- TLSH T1345402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.