General
- Target 2026-10-22_7f122cedb4c81b1a7553a520f4e8b7a7_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261024-h3qfzaee36
- SHA256 0c1df523ca9eea9ddafa41b0bf00882e5f4a941391394a5e44056ff462a0bde3
- MD5 7f122cedb4c81b1a7553a520f4e8b7a7
- SHA1 b3e5fd627c66abaa2dff3372ea5fc471097a59cb
- SHA512 8c8513a7f80245bb5e00d855728d191297a8bcd3fb11354613dac8575ffedf06b25608c1519fcb3af8dc1f47b156bed27b2420457e83b5f06f525e55bf6f3700
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:AfBQGH6SfcoAX+U41
- TLSH T14D5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_7f122cedb4c81b1a7553a520f4e8b7a7_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7f122cedb4c81b1a7553a520f4e8b7a7_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 0c1df523ca9eea9ddafa41b0bf00882e5f4a941391394a5e44056ff462a0bde3
- MD5 7f122cedb4c81b1a7553a520f4e8b7a7
- SHA1 b3e5fd627c66abaa2dff3372ea5fc471097a59cb
- SHA512 8c8513a7f80245bb5e00d855728d191297a8bcd3fb11354613dac8575ffedf06b25608c1519fcb3af8dc1f47b156bed27b2420457e83b5f06f525e55bf6f3700
- SSDEEP 6144:vFlKgzelZNQSBQGH/CSpWqTIoAXjiU4bzF:AfBQGH6SfcoAX+U41
- TLSH T14D5401917DA2D8B3C0419A318CA68BA197376D139A65D203FBAD1F4B2F713D49B7B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.