General
- Target 2026-10-09_7b5f9e2c0fcb811b22e11aadf7ebfd55_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261010-l8994stset
- SHA256 2a6099f18daf445b936589670c850fab6a62c591e53716c5cd2ed04e475f5fd4
- MD5 7b5f9e2c0fcb811b22e11aadf7ebfd55
- SHA1 76523bb68376be9ef9fb5719eb8e34a7729cbc50
- SHA512 8b9ce9d4d43477676ca062c5d2c7cb02f83a516b2e6552717ad536f750dea605828d5becb9edd7dbef01308737bc9b9251bd6107379f6dde5543bb41c00af232
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:gfBQGH6SfQoAX+U49
- TLSH T1EC5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-09_7b5f9e2c0fcb811b22e11aadf7ebfd55_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-09_7b5f9e2c0fcb811b22e11aadf7ebfd55_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 2a6099f18daf445b936589670c850fab6a62c591e53716c5cd2ed04e475f5fd4
- MD5 7b5f9e2c0fcb811b22e11aadf7ebfd55
- SHA1 76523bb68376be9ef9fb5719eb8e34a7729cbc50
- SHA512 8b9ce9d4d43477676ca062c5d2c7cb02f83a516b2e6552717ad536f750dea605828d5becb9edd7dbef01308737bc9b9251bd6107379f6dde5543bb41c00af232
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:gfBQGH6SfQoAX+U49
- TLSH T1EC5402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.