Extracted

• • Target
    2026-06-27_0262acb1c76da5ade7ad9004d046eeb5_coinminer_elex_rhadamanthys_stop
  • Size 128KB
  • SHA256 8cff97e5d0d30d7d4c2f3cac67ae2242b8c7313918d6b1faed8500559e7094d5
  • MD5 0262acb1c76da5ade7ad9004d046eeb5
  • SHA1 f3b2cebec014b1c8f6279272375099a49dcf03d7
  • SHA512 edac34c944af244b3daa7eafe38c5b1e9e790a5990b9be0a3249c2f713ebef288e845ca89c8a8764aa43f6ac68325aea2c1ec7c4b247a2bfd7f7b5adaa0fe1ad
  • SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K1xxKY+T6KWs:LJ0TAz6Mte4A+aaZx8EnCGVu8cnDKWs
  • TLSH
    T1CED3E120B2CB81F6E097527502DE9277AC3E10A6471EE6F7D6E476E3AD113F1B235089
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupxadwarepersistenceransomwarespyware

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2