General
- Target 2026-09-11_8500f1ec8dbb0a116a42207ad58268df_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample260912-j1p8vsdk8v
- SHA256 714e746791243b4efd5f315f39e5727526a88bd0e829812ca79d0ffafd44bdec
- MD5 8500f1ec8dbb0a116a42207ad58268df
- SHA1 d9f2055e3c249ef54acd3bfb782d7cc2fbf0e488
- SHA512 6cf6fc1ec76011c9789bde43e4d9d040a011e2f54957119a5ac4bfd08a8b5aa9049177110014a644492a81ddefa2753fd62ea1c8fdde6ccb8b8624877fb37aac
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:EfBQGH6SfcoAX+U41
- TLSH T1A15401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-11_8500f1ec8dbb0a116a42207ad58268df_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_8500f1ec8dbb0a116a42207ad58268df_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 714e746791243b4efd5f315f39e5727526a88bd0e829812ca79d0ffafd44bdec
- MD5 8500f1ec8dbb0a116a42207ad58268df
- SHA1 d9f2055e3c249ef54acd3bfb782d7cc2fbf0e488
- SHA512 6cf6fc1ec76011c9789bde43e4d9d040a011e2f54957119a5ac4bfd08a8b5aa9049177110014a644492a81ddefa2753fd62ea1c8fdde6ccb8b8624877fb37aac
- SSDEEP 6144:7FlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:EfBQGH6SfcoAX+U41
- TLSH T1A15401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.