Extracted

• • Target
    2026-07-10_f82bc1be239af2ef6d01607d2e267529_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 e24497827b54f6f4074cd0254eb3f93051d2d68b37c233e9211be95e41484d63
  • MD5 f82bc1be239af2ef6d01607d2e267529
  • SHA1 94c5d332c26fbf0d5b3689aaecaae9ee197c6afa
  • SHA512 676abe6e71b82190a757461caabf3ced292968cca70b0cb454479965f1bf66219c18588548e08754a99716953298e1495de44fd47aed68a76a3091db91403612
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuCcnDKW1LgppLRHMY0G:NrFZaaZmEJuBDKW1Lgbdl0G
  • TLSH
    T1A914D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2