General
- Target 2026-10-14_b49ef2b3eea5893bf4055bc9f49055ce_elex_rhadamanthys_smoke-loader
- Size 329KB
- Sample261014-q66lcssy9q
- SHA256 ae66f73a453a29952c40dda810febd7c0d72bb0afabc1fec14a58b0660ae1291
- MD5 b49ef2b3eea5893bf4055bc9f49055ce
- SHA1 adaa69cbbcf3ec871d7fb9e025a20d683a21ad4f
- SHA512 937be93620e7e7095b8a9fb000dd025de1c4a848042859477d62d163a101e7b2e1178e76fcf43a8e904af873ef6b5e9a402046b349f862879acf5252ee8996d1
- SSDEEP 6144:zFlKgzelZNQSBQGH/CSpWqTLoAXjiU4bz:cfBQGH6SfvoAX+U4
- TLSH T1CE7402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_b49ef2b3eea5893bf4055bc9f49055ce_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_b49ef2b3eea5893bf4055bc9f49055ce_elex_rhadamanthys_smoke-loader
- Size 329KB
- SHA256 ae66f73a453a29952c40dda810febd7c0d72bb0afabc1fec14a58b0660ae1291
- MD5 b49ef2b3eea5893bf4055bc9f49055ce
- SHA1 adaa69cbbcf3ec871d7fb9e025a20d683a21ad4f
- SHA512 937be93620e7e7095b8a9fb000dd025de1c4a848042859477d62d163a101e7b2e1178e76fcf43a8e904af873ef6b5e9a402046b349f862879acf5252ee8996d1
- SSDEEP 6144:zFlKgzelZNQSBQGH/CSpWqTLoAXjiU4bz:cfBQGH6SfvoAX+U4
- TLSH T1CE7402457D93C4B3D0414D3188E68BE14B7F6C137AA6E11BFB9D0B4B1EB13884BA6361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.