Extracted

• • Target
    2026-05-27_01940b1e0fbf2e563fb2fd29a04e1800_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 bc5ce10fbd1d8a8473875b5c3cb971de2c4c113a7977d1b96e16f5053e6eb8b0
  • MD5 01940b1e0fbf2e563fb2fd29a04e1800
  • SHA1 47532903edaefdef31b4b7113b795c13943ef8e7
  • SHA512 9b3d781abf466928cbac6ece837f4c8a42f00a65354672c98d3681d2a839404a6918ce72402e4153e2ae8e4d9cccd779499cd2f9e141c95154da18613ff3314a
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuWcnDKW1LgppLRHMY0G:NrFZaaZmEJuNDKW1Lgbdl0G
  • TLSH
    T1D514D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2