General
- Target 2026-10-09_1ef070302837719882ff1ec6aa5e1662_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261010-vbk4dsxxdt
- SHA256 ea39d1280b9d5e054bef2ba9a8f82819fcf5365c35a758f85039c861f0f48abf
- MD5 1ef070302837719882ff1ec6aa5e1662
- SHA1 814e696be392397b5f28ae6da2b680967477a0db
- SHA512 a3d9051ab44f533ffa0771685123be5bd87cc1964de2070346884b9258d432c6154e27a903916ddaae9f981c6dbe037712200c6cf058612b9f11a0ebc2732975
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:XfBQGH6Sf8oAX+U49
- TLSH T19A5401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-09_1ef070302837719882ff1ec6aa5e1662_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-09_1ef070302837719882ff1ec6aa5e1662_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 ea39d1280b9d5e054bef2ba9a8f82819fcf5365c35a758f85039c861f0f48abf
- MD5 1ef070302837719882ff1ec6aa5e1662
- SHA1 814e696be392397b5f28ae6da2b680967477a0db
- SHA512 a3d9051ab44f533ffa0771685123be5bd87cc1964de2070346884b9258d432c6154e27a903916ddaae9f981c6dbe037712200c6cf058612b9f11a0ebc2732975
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzN:XfBQGH6Sf8oAX+U49
- TLSH T19A5401917DA2D8B3C0419A3148A68FA197376D139A65D203F7AD1F4B2F713D49B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.