Extracted

• • Target
    2026-07-04_b427f3258a9507523306284c48ff96a7_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 747KB
  • SHA256 f13d0345de78ffd414e33fbb3d82fd82314c6f93c4b506f1b388d2b4b5bb1886
  • MD5 b427f3258a9507523306284c48ff96a7
  • SHA1 be3ed8141460c5c692627ba154d598387a10a9be
  • SHA512 2c415d0923e4231536574a24bac862fc0eefd16452933e37d8636deac063c6e4f5b74f1c0ce958743d009170de3a82523068c67296532c99bea097ff4aec146a
  • SSDEEP 12288:/bE+u5h1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKC8Rad6P:/Y+Wk70Trc18BSnLW2CRBKViu99LK1Rr
  • TLSH
    T159F4122071C0C0B6D8BB113544D9CA76AE76707247B985DBB7ED63BAAF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2