Extracted

• • Target
    2026-07-12_01163c35cba49ba6417e742ef8c9dc28_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 ff8f998c6432e31b1d41b3a251ef656cf1b1450c9765c2877cd6d299a7f3dad9
  • MD5 01163c35cba49ba6417e742ef8c9dc28
  • SHA1 277f9b56b74307c71b635994839b7ef6d5bb1caa
  • SHA512 ddb0f9c01cb275beba89ec8106953c6034db2ea0cb76ad20702526f818aa5011a3afd892ffa8058a7933457846e6aaa3c7fb8286109cd205e564a2b8f08c2909
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuPcnDKW1LgppLRHMY0G:NrFZaaZmEJuEDKW1Lgbdl0G
  • TLSH
    T13C14D12072C2C1B3C49721754169CB76AE7D5076033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2