Extracted

• • Target
    2026-05-06_63221ec9b1bbb2587b2e74f3ae15ef38_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 2d16564f36e65a9f3385837f2523994a83f81a7d6af44ebc685e72a6ebe85d40
  • MD5 63221ec9b1bbb2587b2e74f3ae15ef38
  • SHA1 aa9549d178ea591f752b6486a9f1adbb546a3fcd
  • SHA512 feb562420cbb7e09ddd5005814cb72ff656cf248d027a929f6331f65bb782911d3b46608552c8a01afe6f73d78a3606368de3ca25aace1b434744e82d2fc0731
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuFcnDKW1LgppLRHMY0G:NrFZaaZmEJuqDKW1Lgbdl0G
  • TLSH
    T19A14D12472C2C1B3C48721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2