Extracted

• • Target
    2026-07-08_6874071318765058f618fbb1e37128bf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 220KB
  • SHA256 7f0d3b34ebe891ba33c1cf5c3c674209f5a8e29fb66fdf39b73bf02329545771
  • MD5 6874071318765058f618fbb1e37128bf
  • SHA1 c346cae45ed06e970ca0f95e525bd72b4248458c
  • SHA512 659f3ba3079924b911afafc2d29522f01870dee1dc37aa237c5e110163b39bdebb8e3fb277ea064b6d6f4cd13936e0d6f2fa12be3aea6129f6920d374ea570f1
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuYcnDKW1LgppLRHMY0TBfJvjcTp5XYVM:NrFZaaZmEJufDKW1Lgbdl0TBBvjc/YVM
  • TLSH
    T11324CF2171C1C1B3C4B7113444EACA769A7A7032076A96D7B7ED27BA6F213E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2