General
- Target 2026-10-15_54e341da42812c7501ef836e8bce9482_elex_rhadamanthys_smoke-loader
- Size 332KB
- Sample261016-ttcdjaad55
- SHA256 b2e498a57764fc5b419c7d022a2017d757f76f24810b48e2bcd94400dffa64f6
- MD5 54e341da42812c7501ef836e8bce9482
- SHA1 5ad929f75ab211b2cd6daf446a3c1d3748ab7a04
- SHA512 ebc891683e5f53f99bc28678872a4dc9848077d6189fa874dd7e9c5e858ab763cf66c4e8c599d0cee1b91a7edfefec7c19f21e0528519acf240985bee0c6bf0a
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTvoAXjiU4bz:+fBQGH6SfboAX+U4
- TLSH T12F7401817DA3D8B3D041493188A6CBA1973B6D13AA65D203FB9D0F4B2FB13D49B7A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_54e341da42812c7501ef836e8bce9482_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-15_54e341da42812c7501ef836e8bce9482_elex_rhadamanthys_smoke-loader
- Size 332KB
- SHA256 b2e498a57764fc5b419c7d022a2017d757f76f24810b48e2bcd94400dffa64f6
- MD5 54e341da42812c7501ef836e8bce9482
- SHA1 5ad929f75ab211b2cd6daf446a3c1d3748ab7a04
- SHA512 ebc891683e5f53f99bc28678872a4dc9848077d6189fa874dd7e9c5e858ab763cf66c4e8c599d0cee1b91a7edfefec7c19f21e0528519acf240985bee0c6bf0a
- SSDEEP 6144:JFlKgzelZNQSBQGH/CSpWqTvoAXjiU4bz:+fBQGH6SfboAX+U4
- TLSH T12F7401817DA3D8B3D041493188A6CBA1973B6D13AA65D203FB9D0F4B2FB13D49B7A351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.