Extracted

• • Target
    2026-05-30_01fa5c2bdb3d79a095cd85e442cb7e56_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 368KB
  • SHA256 bc38ef5b78e85ffa0808c03b98f980dd7a0231534084bbfbcd6b18e2bdacb0ec
  • MD5 01fa5c2bdb3d79a095cd85e442cb7e56
  • SHA1 e8ba897a6a7060a439e79d89dc45bdf6204ba78b
  • SHA512 9e9e8d989cd076fec5d954be44da9330c1ca1d7f6502624274d7b7f81d1aaf26f0881e7add820e2d9446dd1218d9643235b372225f3e4a86e9cb85d1c734773b
  • SSDEEP 6144:NrFZaaZmEJugDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+umh1Lk70TnvjcsMxdABSnLHOr26
  • TLSH
    T1B384F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2