Extracted

• • Target
    2026-07-02_27c3e56a15383d54392d3b89ee374745_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 496KB
  • SHA256 a8843bf8ea37eae00eb870f9aa60cc892b9419d91b3fc82c44216218a00dc27d
  • MD5 27c3e56a15383d54392d3b89ee374745
  • SHA1 4d75d049426807ff60cf0b31112dbf3c1bb661ee
  • SHA512 96d2894965b7cda11059a87d8d6e0ec5eaef5309ab6e87cfdec069720500593ba98346bf93b08b9b764eb63b7d619c2fa8cc4c3173726cd1793ac276253d78f5
  • SSDEEP 12288:/bE+uVh1Lk70TnvjcsMxdABSnLHOr2fqRVnRjx:/Y++k70Trc18BSnLW2CRBz
  • TLSH
    T198B4022071C0C0B7D4BB113544E9CA369A76707147B9D5DBBAEC67BAAF202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2