General
- Target 2026-10-09_37d7a60bbdd58bd40093b6eceafe6283_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261010-sedglses6m
- SHA256 11cde5d24a13cf027eb33ed31e3e5f9584528665e4fd766c52874bffd73e0615
- MD5 37d7a60bbdd58bd40093b6eceafe6283
- SHA1 959f18ae3f48d512cbf0e6c97039ed5aac46902c
- SHA512 671c05c1c769d0438a65de8c38dbf7e4b32650ae56d852827db4b3958d611cd232ea70d8500efd2b6883730fabe551ab634f2c5b558c606effe47a1e603a4339
- SSDEEP 6144:fFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:QfBQGH6SfaoAX+U4d
- TLSH T1265402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-09_37d7a60bbdd58bd40093b6eceafe6283_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-09_37d7a60bbdd58bd40093b6eceafe6283_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 11cde5d24a13cf027eb33ed31e3e5f9584528665e4fd766c52874bffd73e0615
- MD5 37d7a60bbdd58bd40093b6eceafe6283
- SHA1 959f18ae3f48d512cbf0e6c97039ed5aac46902c
- SHA512 671c05c1c769d0438a65de8c38dbf7e4b32650ae56d852827db4b3958d611cd232ea70d8500efd2b6883730fabe551ab634f2c5b558c606effe47a1e603a4339
- SSDEEP 6144:fFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:QfBQGH6SfaoAX+U4d
- TLSH T1265402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.