Extracted

• • Target
    2026-07-20_478fe7e2e0e6d5736d37462e7f6bf067_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 924c5c7edac32c303b61bdc38653240d9d3a23598e31b45c5a867f948f14ddef
  • MD5 478fe7e2e0e6d5736d37462e7f6bf067
  • SHA1 995cc0b74fcf5c9795937d48cf2eeae3686b1985
  • SHA512 3e9bee4cd79b97a7f7f186e2fbf30ffd340974b5d89e1f4a67d1b24740ae4e6b1ab13d278995db1e82c80ec54a97b7211ce00b56d3579e991ae6088ef2bef8d9
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuJcnDKW1LgppLRHMY0G:NrFZaaZmEJumDKW1Lgbdl0G
  • TLSH
    T1DF14D12072C2C1B3C48721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2