General
- Target 2026-11-11_2a8e61ffffa58a34a9859ad2e7252d5e_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261113-sma2fsc12m
- SHA256 afbf0b0c028a3101f199932ff886b2c728e6cd21e99a935638c0b2058771fe18
- MD5 2a8e61ffffa58a34a9859ad2e7252d5e
- SHA1 92eeca9c05f93fcdea2b69d3c5782139312d8f38
- SHA512 699e20e83ceb0a11416d57dcea6ca8ef50de42fcdb1916ec601708a1344c9481ca0f9df2558aefabd16f38d207b6552fc4be6128f0cf8951adf90c7d311c06ca
- SSDEEP 6144:EFlKgzelZNQSBQGH/CSpWqTRoAXjiU4bzN:jfBQGH6SfNoAX+U49
- TLSH T1D85402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_2a8e61ffffa58a34a9859ad2e7252d5e_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_2a8e61ffffa58a34a9859ad2e7252d5e_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 afbf0b0c028a3101f199932ff886b2c728e6cd21e99a935638c0b2058771fe18
- MD5 2a8e61ffffa58a34a9859ad2e7252d5e
- SHA1 92eeca9c05f93fcdea2b69d3c5782139312d8f38
- SHA512 699e20e83ceb0a11416d57dcea6ca8ef50de42fcdb1916ec601708a1344c9481ca0f9df2558aefabd16f38d207b6552fc4be6128f0cf8951adf90c7d311c06ca
- SSDEEP 6144:EFlKgzelZNQSBQGH/CSpWqTRoAXjiU4bzN:jfBQGH6SfNoAX+U49
- TLSH T1D85402457D93C4B3D0414D3188E68BE19B7F6C137AA6E11BFB9D0B4B1FB13844BAA261
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Cosmu payload
Cosmu is a worm written in C++.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.