Extracted

• • Target
    2026-05-17_849fb12257c090859fe642fb7b4b42a5_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 094b90d891eb2dbdc09b9a3d69c78ef0341b39806fe850f22b0c935293fe7bbc
  • MD5 849fb12257c090859fe642fb7b4b42a5
  • SHA1 97dcb754f02a25e24df2b624f79992fc66ed5b6c
  • SHA512 8b7c9853a7262efe3aa9b9e677725753d18cef612b47c8e5ee0262dcf0877dacf994b2b238150ce42a82b8e55a090af7de5f3d201c6bffe9e388880b05e97e15
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuAcnDKW1LgppLRHMY0G:NrFZaaZmEJu3DKW1Lgbdl0G
  • TLSH
    T13A14D12472C2C1B3C48721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2