Extracted

• • Target
    2026-05-16_15c2a08a8ddde776267d599cca9726bb_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 450KB
  • SHA256 05222ac69a376c11761a485faf32cd07c81b0a91dd59e05148b551c56a1f2fb1
  • MD5 15c2a08a8ddde776267d599cca9726bb
  • SHA1 910a2871c09d606f0e0a72cb5ff1e777251784a9
  • SHA512 1496d4c1dd449a6da2048dff01e39bc6acd59d4a27c4d9f857f0914b0b0f2bce6bcf20ac3d4e2ca792904a36137925137a011f5d9f1722023d07e3e269c1090a
  • SSDEEP 12288:/bE+uUh1Lk70TnvjcsMxdABSnLHOr2fqRVt:/Y+Dk70Trc18BSnLW2CRD
  • TLSH
    T183A4022071C1C0B6C4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2