Extracted

• • Target
    2026-05-22_a0702e35234b0e6edad9e302d4a2ac18_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 203KB
  • SHA256 b4c81c48a7a371e2243e9cad161a61b991f02c42ae64a2f3374adf598d8dde36
  • MD5 a0702e35234b0e6edad9e302d4a2ac18
  • SHA1 694c45a74ccabc5037f5ac69e62e5a752db44f61
  • SHA512 6a3fb71ab5e36011572406bba9a8a49cc10e82a5946892dfa3b9badcca39c465f3c80c410d19eadb565c276bb84562ec696e456f58a66814272b2365f839cf8c
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVugcnDKW1LgppLRHMY0TBfJvjo:NrFZaaZmEJuXDKW1Lgbdl0TBBvjo
  • TLSH
    T17314D02161C1C2B3C4B7117441EA8B7A9F7D7076036AAAD7A7DD26B25E203E1B3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2