General
- Target 2026-10-14_78116d1d3b2df88567145f8fa2af60f3_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261014-xcskzagt2q
- SHA256 08c8ec412d3ba8cd7cadecbc46ce9ceae0ae1b0f80e8296f571f69a06ec1891a
- MD5 78116d1d3b2df88567145f8fa2af60f3
- SHA1 99dd7d3ed791d6b7aa1acbfc4591a22c8cdab07e
- SHA512 bfddaa902ff4c5474484f24807c0779b7587b0bfbf074e58f40785fa0a592759f2de67de81d978eab298e6cca98f3d3abaf9e449f41b280f6e2d60e5ed998b50
- SSDEEP 6144:BFlKgzelZNQSBQGH/CSpWqTmoAXjiU4bzV:WfBQGH6SfqoAX+U4l
- TLSH T1A55401917AA2D8B3C4429A3148A6CF6197377D139A65D203B7AD1F4B2F713D09B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_78116d1d3b2df88567145f8fa2af60f3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_78116d1d3b2df88567145f8fa2af60f3_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 08c8ec412d3ba8cd7cadecbc46ce9ceae0ae1b0f80e8296f571f69a06ec1891a
- MD5 78116d1d3b2df88567145f8fa2af60f3
- SHA1 99dd7d3ed791d6b7aa1acbfc4591a22c8cdab07e
- SHA512 bfddaa902ff4c5474484f24807c0779b7587b0bfbf074e58f40785fa0a592759f2de67de81d978eab298e6cca98f3d3abaf9e449f41b280f6e2d60e5ed998b50
- SSDEEP 6144:BFlKgzelZNQSBQGH/CSpWqTmoAXjiU4bzV:WfBQGH6SfqoAX+U4l
- TLSH T1A55401917AA2D8B3C4429A3148A6CF6197377D139A65D203B7AD1F4B2F713D09B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.