General
- Target 2026-10-10_6af7fe74c36b1a0dbcf7833dc70b261c_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261011-n8ymeshd77
- SHA256 89429695bcd3d587410dbb261e7acc8a6c4066be3f5e5aa82376c3998b232949
- MD5 6af7fe74c36b1a0dbcf7833dc70b261c
- SHA1 33eff12ac6c0c2f4c4046f96b6f2ecc47a8233c7
- SHA512 395e0cfedf4a579afb8cced9cb5231eff1b16c395d05134fa8e155bf85283a25093e2cbafd21772f5e441d8e75dd93953e0516f1928ed6b8919c82b8bc8b3f2b
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:gfBQGH6SfzoAX+U41
- TLSH T16D5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_6af7fe74c36b1a0dbcf7833dc70b261c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_6af7fe74c36b1a0dbcf7833dc70b261c_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 89429695bcd3d587410dbb261e7acc8a6c4066be3f5e5aa82376c3998b232949
- MD5 6af7fe74c36b1a0dbcf7833dc70b261c
- SHA1 33eff12ac6c0c2f4c4046f96b6f2ecc47a8233c7
- SHA512 395e0cfedf4a579afb8cced9cb5231eff1b16c395d05134fa8e155bf85283a25093e2cbafd21772f5e441d8e75dd93953e0516f1928ed6b8919c82b8bc8b3f2b
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqT3oAXjiU4bzF:gfBQGH6SfzoAX+U41
- TLSH T16D5402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.