Extracted

• • Target
    2026-07-20_4fcc8e4f21b00185ddccd96d325a62a3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 746KB
  • SHA256 4dae9274101bc41c542f62115f825e1163424e806383c67258108e088c92b7e7
  • MD5 4fcc8e4f21b00185ddccd96d325a62a3
  • SHA1 823f6dfef61e35dd1df5b07996513acf5a2e0f15
  • SHA512 2d00ffee1d2dab88b2e8b97ce5dfa660ee99519c2924ba068a07871e85a2cd4ed25e282f3e174ad3114d49d29a896c1a7b2efab4ec06b82bbce0c966d260c01c
  • SSDEEP 12288:/bE+u9h1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKC8Rad6h:/Y+Sk70Trc18BSnLW2CRBKViu99LK1R1
  • TLSH
    T14BF4122071C0C0B6D8BB113544D9CA76AE76707247B985DBB7ED63BAAF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2