Extracted

• • Target
    2026-04-20_c4e51a5c95db7345a866b84cf945da0e_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 240KB
  • SHA256 9d4b322ddc93a44c5290170a46e6608046764adf8af548e4d3accb3f10be17f6
  • MD5 c4e51a5c95db7345a866b84cf945da0e
  • SHA1 2282808178ee22548f240b645513c2a8dbbde071
  • SHA512 f2148f6026811cc293456f0bd1e953ed2a0242c15bccf409a7f05a7a4ecc567277f4bd1dc5a7d5011dafa7d4551691a08a05a6cebf7a130fd645beed05a00f90
  • SSDEEP 6144:NrFZaaZmEJuaDKW1Lgbdl0TBBvjc/YVM6w:/bE+uch1Lk70TnvjcsM5
  • TLSH
    T1A734CF2071C1C1B3C4BB113444EACA769A7A707207AA95D7BBDD17BA6F213E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2