Extracted

• • Target
    2026-05-03_cd7b341ffea2c1f0311b843b19a928e2_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 ca5111f548cc03c779465ef4d68a1fd714fa473e8b33d732c2495c9373ff2ea0
  • MD5 cd7b341ffea2c1f0311b843b19a928e2
  • SHA1 3428f2c20464f24741147af3303a4bcb1b947085
  • SHA512 056f4f34ddc552d988e06f65b64254270614aa3f32646ab6b31e9e59c7b323f867a3d03f58e99f3609edd259164a94222cf0fb9b724e24d56e1ca6375c61528d
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuicnDKW1LgppLRHMY0G:NrFZaaZmEJuhDKW1Lgbdl0G
  • TLSH
    T14614D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2