Extracted

• • Target
    2026-07-04_fa1ccaa56988cb18fcb2708e8a32ca2a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 221KB
  • SHA256 1bb82c868b29514b6256526bc31815b91e268655e6bb4f052cb2a3a86f992f6c
  • MD5 fa1ccaa56988cb18fcb2708e8a32ca2a
  • SHA1 773dc33dd52c8779abae81776c8b73b40a641363
  • SHA512 2bfac13806721e170181cf451d7d237d3eb25d7bf63c713a78f2bc1ce2ed978d1f1c73fdd57d2b4f998a0afc1e16632a55dcc69fa4e26d6e6605914e8e52cf99
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuIcnDKW1LgppLRHMY0TBfJvjcTp5XYVx:NrFZaaZmEJuPDKW1Lgbdl0TBBvjc/YVx
  • TLSH
    T1B824CF2171C1C1B3C4BB113444EACA769A7A7032076A96D7B7ED27BA6F113E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2