Extracted

• • Target
    2026-06-08_e64b7428333a9a1fda1178d91902761a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 483KB
  • SHA256 00a4d5edb17076193cfd690b8394fc1bda9e8923466e4c9c3dbc7cffce0c64da
  • MD5 e64b7428333a9a1fda1178d91902761a
  • SHA1 49f20ddb0a8c84120cb1e1fe9a335c1edeb0a66a
  • SHA512 4f329b26805bb3eddf435b22e3606e05b6839158f1d9389a8d33f22996055db970bcf0bd7b6a8c387763a5da9647cf125936114d5636537d29dba4f93a720ae6
  • SSDEEP 12288:/bE+ujh1Lk70TnvjcsMxdABSnLHOr2fqRVnRR:/Y+Uk70Trc18BSnLW2CRBv
  • TLSH
    T122B4012071C1C0B6D4BB113544EACB369A36707247B9D5DBBADC67BA6F202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2