General
- Target 2026-10-10_41bebbca48859c35eed8b6a3e30f017c_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261011-te9eqatwbs
- SHA256 cdd74a3d7e5794521afd25b552202cc5c3a3b853276e408598473e9647ac3955
- MD5 41bebbca48859c35eed8b6a3e30f017c
- SHA1 e4deeb79206885a3f5d6304adb04f340ef165286
- SHA512 46024aed70d15984b07568a0a69ee409da959fca945e3ab1127230e9350dcdea923dbb8503af1bb3255c3b06aa386d324f5bf5b6ae3de0e1cdacbd2cd8ce554c
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:gfBQGH6SfRoAX+U4l
- TLSH T11F5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_41bebbca48859c35eed8b6a3e30f017c_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_41bebbca48859c35eed8b6a3e30f017c_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 cdd74a3d7e5794521afd25b552202cc5c3a3b853276e408598473e9647ac3955
- MD5 41bebbca48859c35eed8b6a3e30f017c
- SHA1 e4deeb79206885a3f5d6304adb04f340ef165286
- SHA512 46024aed70d15984b07568a0a69ee409da959fca945e3ab1127230e9350dcdea923dbb8503af1bb3255c3b06aa386d324f5bf5b6ae3de0e1cdacbd2cd8ce554c
- SSDEEP 6144:PFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:gfBQGH6SfRoAX+U4l
- TLSH T11F5402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.