Extracted

• • Target
    2026-05-22_2eaf9a85984afbf68a23685b6e0ccc75_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 480KB
  • SHA256 f206d9971a9692f1452d9856912b5dba4e59dcaebd6b22657c6af65a11fe2fe5
  • MD5 2eaf9a85984afbf68a23685b6e0ccc75
  • SHA1 8f390259c52a9b636a4ea7114ffad3f3ca9c6bdf
  • SHA512 672e0a8f7b69e85de7ce9fbee9a35cb28c582c93bec60082f9e7f6aaebfdf1c2799638a0ef19f66ef38f16693b5dd8d8aa7bf2320bc96dfe85d73c6383988ef8
  • SSDEEP 12288:/bE+u/h1Lk70TnvjcsMxdABSnLHOr2fqRVnRH:/Y+Ik70Trc18BSnLW2CRBF
  • TLSH
    T190A4012071C1C0B7D4BB113544EACB369A36707247B9D5DBBADC67BA6E202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2