Extracted

• • Target
    2026-05-31_eb20298eb368895f12e8c67429ab8920_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 203KB
  • SHA256 838676074a03d1e9365b104beb7af1b871f81a1d5ed6590406ac4d1155b39f51
  • MD5 eb20298eb368895f12e8c67429ab8920
  • SHA1 0c2beced681d20fe76f540e843f4d0fe89824af6
  • SHA512 cee6ef3f5354b04eb364652a7c003e2ecdba7328110cd045450274de83d9a77f8aef37eb7dc3fd1455b19f8861b010aad5b4231b74131fd740f75a5c407130ec
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu+cnDKW1LgppLRHMY0TBfJvjd:NrFZaaZmEJulDKW1Lgbdl0TBBvjd
  • TLSH
    T11A14D02161C1C2B3C4B7117441EA8B7A9F7D7076036AAAD7A7DD26B25E203E1B3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2