Extracted

• • Target
    2026-05-16_50f95e4aafc0ac5d9da2b98bcf3b5ed4_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 320KB
  • SHA256 53c9464c078bc6985db1a83632b78e661ea4ba058d9ecb22acfd1ba79b49b423
  • MD5 50f95e4aafc0ac5d9da2b98bcf3b5ed4
  • SHA1 9d59dffc3b9696e8cf0cafbd44d9ffd0ad997756
  • SHA512 a9ed6d94db1e579e52f0614febab9b1da2b4e6df84de850fc38cddc6f8f198b1f744a623c8cd6713983d9fda9ea51980d98c8d815cab2c0b946e484317ddcdcd
  • SSDEEP 6144:NrFZaaZmEJuCDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLYS:/bE+uEh1Lk70TnvjcsMxdABSnLP
  • TLSH
    T1FA64F12071C1C1B3C4B7013544EACA769A76707207BA95D7BBDD27BAAE113E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2