Extracted

• • Target
    2026-07-22_f912e4fc256bf7f3f5bf3df6106b6b35_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.0MB
  • SHA256 4231cfeb30044f1b671fb4244ecda4cc78ca63dce2c1aaf659b0a8b0a43ccb58
  • MD5 f912e4fc256bf7f3f5bf3df6106b6b35
  • SHA1 df9abdd5c29a28e9be977821a5d1fe4093231ac4
  • SHA512 d0a9693753bcceb1e773a8da419ca2dd178eb7edbce1e79385c31ad2fe68668f1d82b6ed610aa6abd1469d0560f3c37fcc47be5cab7a21bb4ca5ce9dd6ee7462
  • SSDEEP 24576:/Y+zk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOyLBw:1kQTAKYS/v6h3+1uhZcT2NnvOyLi
  • TLSH
    T11535222471C0C4B7E46B403544C9CA76AA767072477A89DBBBED63F5AF203E1A3352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2