Extracted

• • Target
    2026-07-20_81f4f1902e9de4b4593e432799f55dea_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 b05112bc58297db5285556a5ce44b93ee1c7878f23ce65632d3af39bc9f423d9
  • MD5 81f4f1902e9de4b4593e432799f55dea
  • SHA1 3a3211a3f2a6eca7e497ff6fecd9a1fb86bf328c
  • SHA512 61084c47004e1191fb5b68868751c02063bd74cd742ecd22988be4843d5df46f3c736f2d7137e7917ecd8a7717c26bef5252fd4fcb8f6f46bb806d84ed46f8a6
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu8cnDKW1LgppLRHMY0G:NrFZaaZmEJurDKW1Lgbdl0G
  • TLSH
    T11D14D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2