Extracted

• • Target
    2026-07-13_a51c4fc7f23382525bee2c7282717f5b_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 832KB
  • SHA256 80017df615ae64582aff8f2c2400557e9a9f03d1ead108dda5826e381786ff79
  • MD5 a51c4fc7f23382525bee2c7282717f5b
  • SHA1 d8aa82c4d8ce92ae4af4369e90f79c9115a1c130
  • SHA512 eb0a2d38f7ca8d5a812859466705f4bd15952ea024cb016a4bca33bf5e452d6681cd4cacf98dc256e9ceeb01659d712d74232a5598cf1fc71d3c3f5bde9c4811
  • SSDEEP 24576:/Y+Xk70Trc18BSnLW2CRBKViu99LK1Rad6yZ2:dkQTAKYS/v6h3+1uhZ2
  • TLSH
    T1F105222470C0C4B6D47B413544C9CB76AA76707247BA94DBBBDD63B6AF203E1A3352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2