General
- Target 2026-11-02_d84e344d617fdb13a81613865100f361_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261102-z4ejjadt2x
- SHA256 652efc718b5bf3298a4ef46d5311c0947251d4dff9f2d0e44ca9f6131253130b
- MD5 d84e344d617fdb13a81613865100f361
- SHA1 62db117ab88132bbbf89d47f2ca148863b399466
- SHA512 35de12f80c2df25cde5c9ab9687f1cc26cb91b8b0efd3b935699d4e2635d86d68d142e02ce72c39c43887559ff3f7622fea083a15f98ab28f4c8f4c0619fa59e
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:mfBQGH6SfaoAX+U4d
- TLSH T1925402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-02_d84e344d617fdb13a81613865100f361_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_d84e344d617fdb13a81613865100f361_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 652efc718b5bf3298a4ef46d5311c0947251d4dff9f2d0e44ca9f6131253130b
- MD5 d84e344d617fdb13a81613865100f361
- SHA1 62db117ab88132bbbf89d47f2ca148863b399466
- SHA512 35de12f80c2df25cde5c9ab9687f1cc26cb91b8b0efd3b935699d4e2635d86d68d142e02ce72c39c43887559ff3f7622fea083a15f98ab28f4c8f4c0619fa59e
- SSDEEP 6144:xFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:mfBQGH6SfaoAX+U4d
- TLSH T1925402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.