Extracted

• • Target
    2026-05-29_2002df481e3a427d01f357011ab2b03e_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1024KB
  • SHA256 01237063f2edbb888640f71264b72652f62fa0786759db80bad653777dafea34
  • MD5 2002df481e3a427d01f357011ab2b03e
  • SHA1 e549c2c603cf7a31a0e7857a478c2f2b6e0e9b13
  • SHA512 bbde0e4039a41b968e526a572ce28b5afaccf7c384f2f8a0e4b69fed9b09d8609cada8cfc4e8a72417c55db89d5592bfc61b325a7732acef00e018cdcd432d8d
  • SSDEEP 24576:/Y+Pk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:hkQTAKYS/v6h3+1uhZcT2NnvOq
  • TLSH
    T1C325222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2