Extracted

• • Target
    2026-07-04_54c8d68b4aca688b5f1bc291ffaaa9d5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 592KB
  • SHA256 7b8d5c4cd0b4d8e2dffde8a61306ac77c3b5cf3cacdd13ff9172d0106ad0f971
  • MD5 54c8d68b4aca688b5f1bc291ffaaa9d5
  • SHA1 a07cbba7c808e3de63fd1cbdab32111b09b660c4
  • SHA512 35e6e963e17e3d37729a9d93b479148d00ca74413f2f0974584a04be8b31de9abb43bd9b80898026a501f800f9e3df3687c597c7ea1584a6ef81a3440eba9c7f
  • SSDEEP 12288:/bE+u7h1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtS:/Y+Uk70Trc18BSnLW2CRBKVA
  • TLSH
    T160D4122071C1C0B6D4BB013544E9CA769A76307247B995DBBBDC67BAAF203E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2