General
- Target 2026-11-10_f0d61dc45d89ca1f1489425426845536_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261111-vpxpcaax41
- SHA256 9751941580950d4753815eec2e521f30463ba9093ee189aace74114db0e00afd
- MD5 f0d61dc45d89ca1f1489425426845536
- SHA1 c2affb74683647be227d0fe1dcab97b3433dd887
- SHA512 b44884e96d394956e9379f9094d8734e385c3daf8d1a33b896699f59144726250159dbbd6a8c150b4fd433b905482fdd84a3b8ca1d1d8ee2b39a4f288cc93da1
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:XfBQGH6SfRoAX+U4l
- TLSH T1135402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_f0d61dc45d89ca1f1489425426845536_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_f0d61dc45d89ca1f1489425426845536_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 9751941580950d4753815eec2e521f30463ba9093ee189aace74114db0e00afd
- MD5 f0d61dc45d89ca1f1489425426845536
- SHA1 c2affb74683647be227d0fe1dcab97b3433dd887
- SHA512 b44884e96d394956e9379f9094d8734e385c3daf8d1a33b896699f59144726250159dbbd6a8c150b4fd433b905482fdd84a3b8ca1d1d8ee2b39a4f288cc93da1
- SSDEEP 6144:gFlKgzelZNQSBQGH/CSpWqT1oAXjiU4bzV:XfBQGH6SfRoAX+U4l
- TLSH T1135402457DA3C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1EB13844B6A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.