Extracted

• • Target
    2026-06-28_aaf7ede05913bfe91bf96d77eb56a7dd_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.0MB
  • SHA256 e5c2b88c4514823b09ed1b47bf43b0f97141c0d4a78c7beca9c284b150b7c250
  • MD5 aaf7ede05913bfe91bf96d77eb56a7dd
  • SHA1 7c4c7a240efe65b801504bfcc24b6515b3579ffc
  • SHA512 bf5bad2b3d08db5561b016d86003fd246e956352e83dad114b4bb7d407024ebb39a16203ef1f3dfc1396a6bf78b8fc1f21485ff355b2b837fece27682f55740f
  • SSDEEP 24576:/Y+Lk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyz:1kQTAKYS/v6h3+1uhZcT2NnvOyz
  • TLSH
    T10435222470C0C4B7E46B403544C9CA76AA76707247BE89DBBBDD63E9AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2