General
- Target 2026-10-11_de73af8a810e786b9c5ea43e3f4c7c9f_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261012-emdkpae13z
- SHA256 58056c3d12cd7693831432214e6899b535f796980a3fb0c20b796d65f933ada8
- MD5 de73af8a810e786b9c5ea43e3f4c7c9f
- SHA1 ed416d8f0bc1dd58ca1ad1f4902caa5af8ae83fb
- SHA512 509cd4659ec026d4337608476afe4330999143b95065a87b4bfd298334a37624d0d2ab2ad85f0602c2107e9d05dea32752bfdcb5432d883807db0d2f09590321
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTLoAXjiU4bzF:mfBQGH6SfvoAX+U41
- TLSH T1395402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-11_de73af8a810e786b9c5ea43e3f4c7c9f_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_de73af8a810e786b9c5ea43e3f4c7c9f_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 58056c3d12cd7693831432214e6899b535f796980a3fb0c20b796d65f933ada8
- MD5 de73af8a810e786b9c5ea43e3f4c7c9f
- SHA1 ed416d8f0bc1dd58ca1ad1f4902caa5af8ae83fb
- SHA512 509cd4659ec026d4337608476afe4330999143b95065a87b4bfd298334a37624d0d2ab2ad85f0602c2107e9d05dea32752bfdcb5432d883807db0d2f09590321
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTLoAXjiU4bzF:mfBQGH6SfvoAX+U41
- TLSH T1395402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.