Extracted

• • Target
    2026-06-27_b123eee4a1336672dda7dbcc235ee297_coinminer_elex_rhadamanthys_stop
  • Size 144KB
  • SHA256 b9a679f368fea12c0153b8fa075dbc7d7f0006b2a79d4789ee15fd8f78a383b3
  • MD5 b123eee4a1336672dda7dbcc235ee297
  • SHA1 2aaa25f49da6b118d597ef3948b65f234c4ece0e
  • SHA512 26cd11d5f96ae3525966539fd856ff153acab8449c9e9979b269c6ffc1f7df8eeae98d59ffe63ba59c7eefc9e405beb0df1a7f175a3e60520aba1ee886e8f89a
  • SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVuqcnDKW1P
  • TLSH
    T170E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupxadwarepersistenceransomwarespyware

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2