General
- Target 2026-11-10_b9fe7164a8219432bfec08b1fb5073dc_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261111-1vb8gsssfx
- SHA256 735b64588048e52ee2fa3ba08773ca7ec5c366c2273241d60bc8b251e1a78631
- MD5 b9fe7164a8219432bfec08b1fb5073dc
- SHA1 1a88ef60f97b8822fd801a2e734e8dab14fca296
- SHA512 3ec4b8536932e7f939189debf35a92205df9f5041ace45bf0c3a22a2afc2c9c46cc89b59dafed61b6af0fcddae6d084efa872a2708c035cc8ed92c4696b6a787
- SSDEEP 6144:TFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:8fBQGH6SfQoAX+U49
- TLSH T1295402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_b9fe7164a8219432bfec08b1fb5073dc_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_b9fe7164a8219432bfec08b1fb5073dc_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 735b64588048e52ee2fa3ba08773ca7ec5c366c2273241d60bc8b251e1a78631
- MD5 b9fe7164a8219432bfec08b1fb5073dc
- SHA1 1a88ef60f97b8822fd801a2e734e8dab14fca296
- SHA512 3ec4b8536932e7f939189debf35a92205df9f5041ace45bf0c3a22a2afc2c9c46cc89b59dafed61b6af0fcddae6d084efa872a2708c035cc8ed92c4696b6a787
- SSDEEP 6144:TFlKgzelZNQSBQGH/CSpWqTsoAXjiU4bzN:8fBQGH6SfQoAX+U49
- TLSH T1295402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13844BAA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.