Extracted

• • Target
    2026-06-28_b1268a80368d333541e821e0bbcaadd6_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 897KB
  • SHA256 d80013fc9d2cb8f8670947cfbad986eab8831886234056bbffd7507dca398fd9
  • MD5 b1268a80368d333541e821e0bbcaadd6
  • SHA1 8d363f9f411180142d57d328ce09d6b025397e56
  • SHA512 74083040ab03c6a2fdcfabecac848bd58b8207daefc2bf6ceba1ec743bd0227bb5d7df89363e9c3babc8a13fffcc2ec4fbae9aba9aab8b1474a288c49be900e6
  • SSDEEP 24576:/Y+Ok70Trc18BSnLW2CRBKViu99LK1Rad6yZcTT:skQTAKYS/v6h3+1uhZcTT
  • TLSH
    T18E15222471C0C4B2D477413544C9CA72AA36707247BE99DBBBED63B9AF203E163352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2