Extracted

• • Target
    2026-06-02_979093afcf13421cb88cc4d72d0c4da0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 640KB
  • SHA256 9c59981fb52e0ab5d92791d70e53b280d5e73a9f78e3deeff312a46b7f0bc943
  • MD5 979093afcf13421cb88cc4d72d0c4da0
  • SHA1 efc81ca4fce5206f78fd792f8968049e527bd1d1
  • SHA512 37d34bcf79206ac6cbb4da5fd9ec71af6146e865ac120a504270d58cbe48356529d2007c0c36f2909b174f55724732de759864fbeead4dca0fa7bd1f6dd5aa8a
  • SSDEEP 12288:/bE+uxh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LN:/Y+Kk70Trc18BSnLW2CRBKViu99LN
  • TLSH
    T170D412207180C4B6D4BB113544EACA729A76307247B995DBBBDC67BA6F203E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2