General
- Target 2026-10-15_63f0293c48aa6f33025291f0f6fcecea_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261016-r7sassaa96
- SHA256 771912f69fafd56358f0f8847404a2e6cfd4dadc64e459f6836ea6f54add62a2
- MD5 63f0293c48aa6f33025291f0f6fcecea
- SHA1 bb93e567a31f04a5bbba8fff9c391d1ec8f74998
- SHA512 0fe5fb83c7a0df565bd0f9a17d365d69b337ba4f50dce0107a105a69d65d152d2aabdeddc80a0ce6ffa64ef62126b5e31548e1a525d5675b64301628dea519c5
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz:XfBQGH6SfioAX+U4
- TLSH T16E54F1917EA2D8B3C4419A3148A78FA197376D139A65D203B7AD1F4B2F713D09B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_63f0293c48aa6f33025291f0f6fcecea_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-15_63f0293c48aa6f33025291f0f6fcecea_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 771912f69fafd56358f0f8847404a2e6cfd4dadc64e459f6836ea6f54add62a2
- MD5 63f0293c48aa6f33025291f0f6fcecea
- SHA1 bb93e567a31f04a5bbba8fff9c391d1ec8f74998
- SHA512 0fe5fb83c7a0df565bd0f9a17d365d69b337ba4f50dce0107a105a69d65d152d2aabdeddc80a0ce6ffa64ef62126b5e31548e1a525d5675b64301628dea519c5
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz:XfBQGH6SfioAX+U4
- TLSH T16E54F1917EA2D8B3C4419A3148A78FA197376D139A65D203B7AD1F4B2F713D09B7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.