Extracted

• • Target
    2026-05-11_5ee2216b241d37d6ee534aa3e5b5b3ef_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wannacry
  • Size 1024KB
  • SHA256 2dec2ef0e284ee63074d27e95f909b135f1f0cbbd28f446a7d9e8d19a628d9d0
  • MD5 5ee2216b241d37d6ee534aa3e5b5b3ef
  • SHA1 2e3b7ae76de7da9a6d4ef058e5c3ed0b1d5a91f3
  • SHA512 02c4ac3f103fa79a1bf8e1e4199cefaf65bf2c80927d7d34580f6824e42b6cb871b5e3b6a9196186e4740479f3790664eae61467c4e5c79096f17919fe5a8a29
  • SSDEEP 24576:/Y+8k70Trc18BSnLW2CRBKViu99LK1Rad6yZcT2RcWr:SkQTAKYS/v6h3+1uhZcT2j
  • TLSH
    T1FF2512147181C0B3E467013444DDCF77697A7072436A9ADBBBD8A7B6EE306E1A7342CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • Detects Windows executables referencing non-Windows User-Agents

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2