General
- Target 2026-10-10_8fc98c525670666306e635e40b47446c_elex_rhadamanthys_smoke-loader
- Size 296KB
- Sample261011-kdaeka1v8k
- SHA256 007849fda7a97523e042bfcf0ab69c355ca7d54776590b02a111310829b753c6
- MD5 8fc98c525670666306e635e40b47446c
- SHA1 35e022aa20bbe72bf2f5efe3ac5c18988e9b9444
- SHA512 0ceee19728e8300602ab1cd4f5ece7efd4372a6e9e3e6f9c9a1aad2b7d257c3e53c7925fba05dcb42cd18d9816e81001471207dfab2869496f0f231b4087dcf2
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bzt:XfBQGH6SfyoAX+U4d
- TLSH T1CA54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_8fc98c525670666306e635e40b47446c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_8fc98c525670666306e635e40b47446c_elex_rhadamanthys_smoke-loader
- Size 296KB
- SHA256 007849fda7a97523e042bfcf0ab69c355ca7d54776590b02a111310829b753c6
- MD5 8fc98c525670666306e635e40b47446c
- SHA1 35e022aa20bbe72bf2f5efe3ac5c18988e9b9444
- SHA512 0ceee19728e8300602ab1cd4f5ece7efd4372a6e9e3e6f9c9a1aad2b7d257c3e53c7925fba05dcb42cd18d9816e81001471207dfab2869496f0f231b4087dcf2
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bzt:XfBQGH6SfyoAX+U4d
- TLSH T1CA54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.