General
- Target 2026-10-06_1d4f2e144c4253eb69cceec90847728d_elex_rhadamanthys_smoke-loader
- Size 323KB
- Sample261006-sd8lcszv8p
- SHA256 8f5a4da12f6a3eff77c0336d1f465fd412e08c30415535cf74760cc812e7eecf
- MD5 1d4f2e144c4253eb69cceec90847728d
- SHA1 0e4c1edfc3db66262b14b27fb068996dc0401ac8
- SHA512 bdc653f03584d7216620ca109ada9b81809faf767d47beb1f852e1fd484394bf9500a0e749bbb816169fec37c1cb0036a360d4390bf8f50127b6feba1b4e89a6
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bz:gfBQGH6SfIoAX+U4
- TLSH T1466402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-06_1d4f2e144c4253eb69cceec90847728d_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-06_1d4f2e144c4253eb69cceec90847728d_elex_rhadamanthys_smoke-loader
- Size 323KB
- SHA256 8f5a4da12f6a3eff77c0336d1f465fd412e08c30415535cf74760cc812e7eecf
- MD5 1d4f2e144c4253eb69cceec90847728d
- SHA1 0e4c1edfc3db66262b14b27fb068996dc0401ac8
- SHA512 bdc653f03584d7216620ca109ada9b81809faf767d47beb1f852e1fd484394bf9500a0e749bbb816169fec37c1cb0036a360d4390bf8f50127b6feba1b4e89a6
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bz:gfBQGH6SfIoAX+U4
- TLSH T1466402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.