Extracted

• • Target
    2026-06-29_d6816391e07b6e180b66f503eeaa8def_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 746KB
  • SHA256 1c708d39f0751214156ead80f75a0928068e922053ed2072d7f2a24457575ad4
  • MD5 d6816391e07b6e180b66f503eeaa8def
  • SHA1 2a658016b587018445aecf6d4ed3bcf55730ace0
  • SHA512 cf975c1d979ba7365e3e171c393fd771202e3bbacf36393b2de6358814716fc8306ab0889b51d0346a5e7a65908a8332e7ccb418238f4fd566023db3bc5ec0a6
  • SSDEEP 12288:/bE+uah1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKC8Rad6h:/Y+5k70Trc18BSnLW2CRBKViu99LK1R1
  • TLSH
    T176F4122071C0C0B6D8BB113544D9CA76AE76707247B985DBB7ED63BAAF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2