Extracted

• • Target
    2026-06-05_fd0a9c7b6d0d3d7d28195bb52704713f_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.0MB
  • SHA256 f22cdae3acd880fb5347725329f6a0dcb38ae8a600922acef923f3d1a68108fd
  • MD5 fd0a9c7b6d0d3d7d28195bb52704713f
  • SHA1 30aea8f093729a4e25ed4cdf6ef47f9caa1c92b7
  • SHA512 98af49bf255a25252fe59221ccfacef6957acb40efe4190f2f44678b3e38d5272a5a15ca52257d5cf8e41accdb89195eded265845eb97069152d5c56c8b06aae
  • SSDEEP 24576:/Y+rk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyLBw:5kQTAKYS/v6h3+1uhZcT2NnvOyLi
  • TLSH
    T1E635222471C0C4B7E46B403544C9CA76AA767072477A89DBBBED63F5AF203E1A3352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2