Extracted

• • Target
    2026-07-08_80d7ada49fade6028f99169ff0a6fde6_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 220KB
  • SHA256 9b347d129cf944facf2bb9bb51da637cb7207fed05436eaa48f11c8924e844f4
  • MD5 80d7ada49fade6028f99169ff0a6fde6
  • SHA1 a6e293f01d73eda78b01f1e6c146c5337a3733cf
  • SHA512 fff9650951bdc48f88e114991aea0e787841714964a8beeac079009a73be8949c6ff2cfc9c5a89a26d301ac4e961e170918cf46730c699303d03d3a80d30f582
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuzcnDKW1LgppLRHMY0TBfJvjcTp5XYVM:NrFZaaZmEJuwDKW1Lgbdl0TBBvjc/YVM
  • TLSH
    T1D224CF2171C1C1B3C4B7113444EACA769A7A7032076A96D7B7ED27BA6F213E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2