Extracted

• • Target
    2026-05-22_c1623004bafea39f8a168e162a61f0a6_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 816KB
  • SHA256 1e7f2a9ca6a3c9958b06549903f511ea741aee6b58b28d2c16cbfb79e12d9a3e
  • MD5 c1623004bafea39f8a168e162a61f0a6
  • SHA1 fc57fa7b49ccd5065657cfc347336d575a74a80d
  • SHA512 8c25e71e2acf8b53c419d7cd2015120a8c5465d128c54b22e1c530886225375b9b4864852ab2e0a03518624ee2cee0ddc1c91934ac6e8249ab8bd18ee1545a9d
  • SSDEEP 24576:/Y++k70Trc18BSnLW2CRBKViu99LK1Rad6v:0kQTAKYS/v6h3+1uK
  • TLSH
    T18505122471C0C4B6D4BB013544D9CB72AE7670B247BA94DB7ADD63B6AF203E1A3352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2