Extracted

• • Target
    2026-05-15_69f568260fdd2f43808340f51a131325_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 203KB
  • SHA256 05be5e86426dd3f7683601928009fd2dd5c82fefc2a193dde82d5e70f60ce896
  • MD5 69f568260fdd2f43808340f51a131325
  • SHA1 4bdcd82cf895c4706b2c09571fdc89ff8c6902e0
  • SHA512 a6e11eb4eea19b90b9a67d235539fe8aeae8b2caa151dfaa71bb799539801a161c9cec1cb17cbb0c6d578e425837c13abaa7521d1ca624f63f27a746f13ff4fe
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuJcnDKW1LgppLRHMY0TBfJvjo:NrFZaaZmEJumDKW1Lgbdl0TBBvjo
  • TLSH
    T1EB14D02161C1C2B3C4B7117441EA8B7A9F7D7076036AAAD7A7DD26B25E203E1B3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2