Extracted

• • Target
    2026-06-30_9ef511c6967bf393a75763c4b580f2c4_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 218KB
  • SHA256 e787e0364ac6cb08f44872e96b52267591931784a4c489ca910a7a976867ddea
  • MD5 9ef511c6967bf393a75763c4b580f2c4
  • SHA1 46f68f42ed008aef213f8e387c6a0b2674793640
  • SHA512 6639fea87cb5c93ce9f80d16271274150d8cb143a8ed7abc2079939f4f26b37be7a66517c2b57068a2b6b14bd7bbae9a8737bef216a8323ebfab82c2a7a39ee0
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVukcnDKW1LgppLRHMY0TBfJvjcTp5X:NrFZaaZmEJuDDKW1Lgbdl0TBBvjc/
  • TLSH
    T1B024CF2171C1C1B3C4B7113444EACA769A7A703207AA95D7B7ED27BA6F213E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2