Extracted

• • Target
    _9bab597271bb586e84d65394cc4397eedbc606659637bcdd81699d2967873e16.exe
  • Size 168KB
  • SHA256 9bab597271bb586e84d65394cc4397eedbc606659637bcdd81699d2967873e16
  • MD5 cdf9e6397e4080cb79ea5d45e3b36735
  • SHA1 d5200914abbbcd58b2049ed2b0e8a56abe767684
  • SHA512 e5f559641283a1eec803e70866f27726e2449df86783f73aff68343ccd95172498ef0aa803d84fd7b3ad442114e498a7923872ca5574c1afe8e6f6d86f96e470
  • SSDEEP 1536:QJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+XK:QJ0TAz6Mte4A+aaZx8EnCGVuX
  • TLSH
    T169F3021646DB58F7E49B12BD469D9063B2FBA06F4BCE3EDBE1FC224DD6162B01580248
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • Patched UPX-packed file

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2