General
- Target 2026-10-22_7fbf2514e2e310de5406651ceedf3108_elex_rhadamanthys_smoke-loader
- Size 288KB
- Sample261024-hz529aee29
- SHA256 9bcd4c6a022eb20dba1852c1596e907ea4b02d429b5e61a0893926ac3137848a
- MD5 7fbf2514e2e310de5406651ceedf3108
- SHA1 745f186f7379808dfcd321df6469b50c3c97f475
- SHA512 509791a1b29993ec7f5e784f8fd93b1acdc5f8f005662bb5f19ca55fa9cc51e27ca3dc1cf1c8f288f647e768c702a7b7c94c2f5b7769d204028236399be299b4
- SSDEEP 6144:9FlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzF:afBQGH6Sf0oAX+U41
- TLSH T17054F1457DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_7fbf2514e2e310de5406651ceedf3108_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7fbf2514e2e310de5406651ceedf3108_elex_rhadamanthys_smoke-loader
- Size 288KB
- SHA256 9bcd4c6a022eb20dba1852c1596e907ea4b02d429b5e61a0893926ac3137848a
- MD5 7fbf2514e2e310de5406651ceedf3108
- SHA1 745f186f7379808dfcd321df6469b50c3c97f475
- SHA512 509791a1b29993ec7f5e784f8fd93b1acdc5f8f005662bb5f19ca55fa9cc51e27ca3dc1cf1c8f288f647e768c702a7b7c94c2f5b7769d204028236399be299b4
- SSDEEP 6144:9FlKgzelZNQSBQGH/CSpWqTgoAXjiU4bzF:afBQGH6Sf0oAX+U41
- TLSH T17054F1457DA3C8B3D04149318CA6CBE1577A7C13AE65E207FB993F4F2EB13848B6A251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.