General
- Target 2026-11-01_8889935ae1d1c735d6d3ed3b53df5528_elex_rhadamanthys_smoke-loader
- Size 292KB
- Sample261102-s6pzqaxt7n
- SHA256 652b4d15df0129af1c64d2360b04e23880d8196b416e70a143597a0335962bcf
- MD5 8889935ae1d1c735d6d3ed3b53df5528
- SHA1 3461fa659cf5917fc0b617bdadc6083fabe5aded
- SHA512 0707be239ab0de41d97bef9ee2c938f4e9aad365f424e1dc1b430bf60149bd7aa76ad6007f65fc6bd09ae1355a52967e39892bc35eb88f270591074638f2196b
- SSDEEP 6144:hFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzF:2fBQGH6SfwoAX+U41
- TLSH T15754F1417DA3D8B3D04149318CA68BE1973B7C13AA65D207FB9D2F4F2EB13849B6A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_8889935ae1d1c735d6d3ed3b53df5528_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_8889935ae1d1c735d6d3ed3b53df5528_elex_rhadamanthys_smoke-loader
- Size 292KB
- SHA256 652b4d15df0129af1c64d2360b04e23880d8196b416e70a143597a0335962bcf
- MD5 8889935ae1d1c735d6d3ed3b53df5528
- SHA1 3461fa659cf5917fc0b617bdadc6083fabe5aded
- SHA512 0707be239ab0de41d97bef9ee2c938f4e9aad365f424e1dc1b430bf60149bd7aa76ad6007f65fc6bd09ae1355a52967e39892bc35eb88f270591074638f2196b
- SSDEEP 6144:hFlKgzelZNQSBQGH/CSpWqTkoAXjiU4bzF:2fBQGH6SfwoAX+U41
- TLSH T15754F1417DA3D8B3D04149318CA68BE1973B7C13AA65D207FB9D2F4F2EB13849B6A351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.