Extracted

• • Target
    2026-07-12_f30fa13ccd4a2b922802e283c960c6d2_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 464KB
  • SHA256 f2699802e4d1a9da86c744ba1d8f06e09eca2e1d658884488242c48b62d33a32
  • MD5 f30fa13ccd4a2b922802e283c960c6d2
  • SHA1 079a5685a808be89d2cea87712b848189cf539bb
  • SHA512 4b8116f1db17e8a2d45192854d2e6d04afcce97141af08a0c273267f3a8ca974b9b6086a5caa8cdc44927858ad17608aa61983179cbd478db7a44c854ad48242
  • SSDEEP 12288:/bE+uhh1Lk70TnvjcsMxdABSnLHOr2fqRVm:/Y+uk70Trc18BSnLW2CR0
  • TLSH
    T136A4022071C1C0B7D4BB113444EACA369A36707247B9D5DBBBDD67BA6E202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2