Extracted

• • Target
    2026-05-27_03bae9f946a131602ba3169c54992ddd_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 221KB
  • SHA256 97456b06826aff9f174e01ebf495a06b1e4ed7c8a4fb7813d5252263af47652b
  • MD5 03bae9f946a131602ba3169c54992ddd
  • SHA1 0e47dd38e2efee392b3dfa4b378569abf5a9a8eb
  • SHA512 6592fe559a5a2c1337b04878cd0075c93d275334fe2e264133bf212c86cef270a5004988ae48cca684c5231196c0f863a03809b6c72d37ef67df5ec500daa201
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVubcnDKW1LgppLRHMY0TBfJvjcTp5XYVx:NrFZaaZmEJuIDKW1Lgbdl0TBBvjc/YVx
  • TLSH
    T17424CF2171C1C1B3C4BB113444EACA769A7A7032076A96D7B7ED27BA6F113E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2