General
- Target 2026-10-22_926023afce1f4c6400fc4ac6dcd9b03a_elex_rhadamanthys_smoke-loader
- Size 296KB
- Sample261024-e6542sec45
- SHA256 942055679f57f3966912cc4203deeb02310fca616aa8753a70cef4a152758fee
- MD5 926023afce1f4c6400fc4ac6dcd9b03a
- SHA1 009da75dbac21ec3b62ce75d1f38bdad7276e399
- SHA512 b8303aa5fb22f574d9aaabeeb763c9cfff0d6de81f2a2f5510cd238dea16f72bf4477c68ee649cd4c32219c92a485999ed1dbd7b38281afce5adccc400ae9ff1
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz1:xfBQGH6SfyoAX+U4F
- TLSH T10D54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_926023afce1f4c6400fc4ac6dcd9b03a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_926023afce1f4c6400fc4ac6dcd9b03a_elex_rhadamanthys_smoke-loader
- Size 296KB
- SHA256 942055679f57f3966912cc4203deeb02310fca616aa8753a70cef4a152758fee
- MD5 926023afce1f4c6400fc4ac6dcd9b03a
- SHA1 009da75dbac21ec3b62ce75d1f38bdad7276e399
- SHA512 b8303aa5fb22f574d9aaabeeb763c9cfff0d6de81f2a2f5510cd238dea16f72bf4477c68ee649cd4c32219c92a485999ed1dbd7b38281afce5adccc400ae9ff1
- SSDEEP 6144:2FlKgzelZNQSBQGH/CSpWqT+oAXjiU4bz1:xfBQGH6SfyoAX+U4F
- TLSH T10D54F1813992D8B2D041553188ABCFA1873BBC139A65D243F7D92F4F2EB13D4AB6B315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.