Extracted

• • Target
    2026-07-23_2bb28004e5b93ae7e97bb4e792b334de_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 483KB
  • SHA256 732d953c3aacbe1708ad903b69c0332d0e45fda8b99ca2aa94976bd860be30ff
  • MD5 2bb28004e5b93ae7e97bb4e792b334de
  • SHA1 c272218fe06002794d98d86d4aecb900630c1ec0
  • SHA512 00b1f9751d13573619b7955c9a0668e5a9f5c03a6422cdf8856a78442d5ee4a86bcdea55b854474a0649070cbbbc7b53cd27c23b23f70b1487187373ee30c868
  • SSDEEP 12288:/bE+uhh1Lk70TnvjcsMxdABSnLHOr2fqRVnRR:/Y+ik70Trc18BSnLW2CRBv
  • TLSH
    T1B1B4012071C1C0B6D4BB113544EACB369A36707247B9D5DBBADC67BA6F202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2