General
- Target 2026-10-13_d93214706ba62c4ba78a2c07ee9b6b0e_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261014-e367yayvaz
- SHA256 70625e40fc4d8a3b9ccf5f97ef0ffc9bccc69ce87b9f458801655fdbe1a3c334
- MD5 d93214706ba62c4ba78a2c07ee9b6b0e
- SHA1 30ff9066981a0e4e19961fb8f3a0a4ed2a28847b
- SHA512 b95c936a92cf5ebc3e8909d420b012c6db7c5aeaf33b55ef6a1101d5f37bab7af3c0c538d1d3c9aa1c53f99fc9c6b22efcea73dc2183084e0fc4b2d8ae467651
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:TfBQGH6SfBoAX+U4l
- TLSH T1635401917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_d93214706ba62c4ba78a2c07ee9b6b0e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_d93214706ba62c4ba78a2c07ee9b6b0e_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 70625e40fc4d8a3b9ccf5f97ef0ffc9bccc69ce87b9f458801655fdbe1a3c334
- MD5 d93214706ba62c4ba78a2c07ee9b6b0e
- SHA1 30ff9066981a0e4e19961fb8f3a0a4ed2a28847b
- SHA512 b95c936a92cf5ebc3e8909d420b012c6db7c5aeaf33b55ef6a1101d5f37bab7af3c0c538d1d3c9aa1c53f99fc9c6b22efcea73dc2183084e0fc4b2d8ae467651
- SSDEEP 6144:UFlKgzelZNQSBQGH/CSpWqT9oAXjiU4bzV:TfBQGH6SfBoAX+U4l
- TLSH T1635401917AA2D8B3D4429A314CA68F6197377D139A65D203B7AD1F4B2F713D09B3B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.