General
- Target 2026-11-10_b82ab025e4dc46aa9cbe7c9de7b4a26a_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261111-12d1nact9s
- SHA256 3a598a810b3b235ebf914f48552c274899ecc7af4278805570014d8746f3042c
- MD5 b82ab025e4dc46aa9cbe7c9de7b4a26a
- SHA1 dbb93dd898446af3fdd5642e1fefb5e1e6f4f8ac
- SHA512 7f7de5a02fbada9cd2889713901f075b98d667efd5de77702bce5604b85b6550448986b41ea1fbe9d553d618bf9a25376306ef54ba2ac5a508e07ddb1c3deae1
- SSDEEP 6144:XFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:IfBQGH6SfuoAX+U41
- TLSH T1615402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_b82ab025e4dc46aa9cbe7c9de7b4a26a_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_b82ab025e4dc46aa9cbe7c9de7b4a26a_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 3a598a810b3b235ebf914f48552c274899ecc7af4278805570014d8746f3042c
- MD5 b82ab025e4dc46aa9cbe7c9de7b4a26a
- SHA1 dbb93dd898446af3fdd5642e1fefb5e1e6f4f8ac
- SHA512 7f7de5a02fbada9cd2889713901f075b98d667efd5de77702bce5604b85b6550448986b41ea1fbe9d553d618bf9a25376306ef54ba2ac5a508e07ddb1c3deae1
- SSDEEP 6144:XFlKgzelZNQSBQGH/CSpWqTaoAXjiU4bzF:IfBQGH6SfuoAX+U41
- TLSH T1615402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.