Extracted

• • Target
    2026-06-28_96e83658bc7e59fb5500af7a83d3c3b8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.0MB
  • SHA256 c1526bc184f246d0f586ffd4fb96a51b98033bb8240c99ff433d870da0166c83
  • MD5 96e83658bc7e59fb5500af7a83d3c3b8
  • SHA1 a7374fd8440e6c129578e9274fa5d45aeb8d7df2
  • SHA512 548246058b69414611d8e88d56f99aa51c9e1e6c39d53b82a9dd36b5bcdfcb319e0642f777293710d8abc6472ef133edea8c16700930d0d9934ce691b621ce2e
  • SSDEEP 24576:/Y+uk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyN:4kQTAKYS/v6h3+1uhZcT2NnvOyN
  • TLSH
    T11D35222471C0C4B3E46A413544C9CB76AA76707247BE89DBBBE963F5AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2