Extracted

• • Target
    2026-07-15_fa288e7628b8ff374b8067fc5d639641_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 985809dc3b54085dba0686b077a2ebc908d6288c60814d798e5c7db994222461
  • MD5 fa288e7628b8ff374b8067fc5d639641
  • SHA1 d561589d603afaeb4c64b2c49270890f5bf36385
  • SHA512 1418c6cfe41d303decee00edbb08e4f9de334d989e485cbf69d0c470382a534b31a974051d84b89151bc20856cb2ee1a29208f4c47007e708d25901c25f4dd4b
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuhcnDKW1LgppLRHMY0G:NrFZaaZmEJuODKW1Lgbdl0G
  • TLSH
    T10F14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2