Extracted

• • Target
    2026-07-10_7f649a324015e872e822a748d321f99d_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 93659b11c3142808a4fc7d30aadc06bdcef7201af78de375423d2f0fcf32dd35
  • MD5 7f649a324015e872e822a748d321f99d
  • SHA1 95fb89b366a88501e052c0e17fe99388336af1d3
  • SHA512 2a1641d58b36342542c30c7b6d1c28f4c0afa9a23b9c4cb1e13719eb3a7332035da763beab7effed6c0ad615433d272e4a48f65264bba8a000c0f643fc8c93cb
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuLcnDKW1LgppLRHMY0G:NrFZaaZmEJu4DKW1Lgbdl0G
  • TLSH
    T14914D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2