General
- Target 2026-10-22_f0ba1145fa096c7b4c23c76161661c77_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample261023-dkvwhscb57
- SHA256 b314fd7d74debf093ac40e2ff9e45dcd26e6526d0356ddfae325209e441a6361
- MD5 f0ba1145fa096c7b4c23c76161661c77
- SHA1 f5853057e3066cdd4c50e69f77347741cc2aed6a
- SHA512 3d3ed6f5c9d2f104523810ad34dd4a9edb46c68c51ca70794cfac54fceeb7db4465558cc6a8f640d27e733b26c1de0fcdbf8fc3316247f18a6f1f1d94586f7c4
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:1fBQGH6SfKCBXoAX+U4
- TLSH T1E165CFB27B92C66BD4E7C23DB4458557A7F29B024D13926397A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_f0ba1145fa096c7b4c23c76161661c77_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f0ba1145fa096c7b4c23c76161661c77_elex_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 b314fd7d74debf093ac40e2ff9e45dcd26e6526d0356ddfae325209e441a6361
- MD5 f0ba1145fa096c7b4c23c76161661c77
- SHA1 f5853057e3066cdd4c50e69f77347741cc2aed6a
- SHA512 3d3ed6f5c9d2f104523810ad34dd4a9edb46c68c51ca70794cfac54fceeb7db4465558cc6a8f640d27e733b26c1de0fcdbf8fc3316247f18a6f1f1d94586f7c4
- SSDEEP 6144:SFlKgzelZNQSBQGH/CSpWqTPueF/mNyBXoAXjiU4bz:1fBQGH6SfKCBXoAX+U4
- TLSH T1E165CFB27B92C66BD4E7C23DB4458557A7F29B024D13926397A0EF3DCA392814DDCC42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.