Extracted

• • Target
    2026-07-14_7a22ac96c340f6ab372ac957803ef634_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 592KB
  • SHA256 05a9e8429f0a4e50775e5d582cdfbcdccba6868610badbe6786641a061d9e527
  • MD5 7a22ac96c340f6ab372ac957803ef634
  • SHA1 4edcab6a3d58325c323d01a2cba3e1bf47d1e1fa
  • SHA512 5e026a84f4ff7715dce67ae8276d9cc630044973daf474b763de6e0ddbf393bde77786b2aac7bed97744521959a12974bee356cf612142e913e4e74ff861ee0f
  • SSDEEP 12288:/bE+uAh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtS:/Y+Xk70Trc18BSnLW2CRBKVA
  • TLSH
    T1A5D4022071C1C0B6D4BB013544E9CA769A76307247B995DBBBDC67BAAF203E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2