Extracted

• • Target
    2026-06-04_b44d8eaa954de9a60522192399f78e4c_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.0MB
  • SHA256 7e8821ea434ed31edab7fa072cf2577e7431cb86ea6cc3f24dcf2539587ba1bf
  • MD5 b44d8eaa954de9a60522192399f78e4c
  • SHA1 ba10e7cfdf24fcf0143ecbf9eda4099ef9430671
  • SHA512 61cfe649a5400bbd88316ad00a1bba3e505f082b23d4d4bbe85a04b76c328f4cf2fea91efd2d6d3d0d54f29d598c4e01753ac810ae542b23e132ddd46980e0e9
  • SSDEEP 24576:/Y+5k70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyLBw:rkQTAKYS/v6h3+1uhZcT2NnvOyLi
  • TLSH
    T17235222471C0C4B7E46B403544C9CA76AA767072477A89DBBBED63F5AF203E1A3352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2