General
- Target 2026-10-19_6c3225e92560b3b581ee56fa9070d2d3_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261020-vt8meatz2j
- SHA256 57fd104d1bcca4a9bbc51377b53f0831878be568e9fff7937bad8bb211b530e5
- MD5 6c3225e92560b3b581ee56fa9070d2d3
- SHA1 f2692e1955a1de8cfe479e2b91561795535663a8
- SHA512 5de68e54a8f0ff88bcb4199742f62fbd84f373efe04e0c54b5cb84082990cd504a33aaa9d37308440401de0e3ecac0345ef82ea699c79b009e1053458d30cf7a
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzV:BfBQGH6SfnoAX+U4l
- TLSH T1CB54F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_6c3225e92560b3b581ee56fa9070d2d3_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_6c3225e92560b3b581ee56fa9070d2d3_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 57fd104d1bcca4a9bbc51377b53f0831878be568e9fff7937bad8bb211b530e5
- MD5 6c3225e92560b3b581ee56fa9070d2d3
- SHA1 f2692e1955a1de8cfe479e2b91561795535663a8
- SHA512 5de68e54a8f0ff88bcb4199742f62fbd84f373efe04e0c54b5cb84082990cd504a33aaa9d37308440401de0e3ecac0345ef82ea699c79b009e1053458d30cf7a
- SSDEEP 6144:mFlKgzelZNQSBQGH/CSpWqTToAXjiU4bzV:BfBQGH6SfnoAX+U4l
- TLSH T1CB54F2457DA3D4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.