Extracted

• • Target
    2026-08-01_16d1e3f9338eee146fb4d65a203a3a52_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 866KB
  • SHA256 c6ba24c0fbfd9aed37f27dd862f029c2e245755c3398b47211034b20858bc53b
  • MD5 16d1e3f9338eee146fb4d65a203a3a52
  • SHA1 5a33f19d9ad6ee1101061315f3a4228c94021513
  • SHA512 21470145d54ee3aa091e089ec111868da814359274b2cb6e67d2a77f6f4272420c6651ea7506b85e833b2e9b046a9230057d46fadffaace61324fe668fc69745
  • SSDEEP 24576:/Y+Ok70Trc18BSnLW2CRBKViu99LK1Rad6yZN:YkQTAKYS/v6h3+1uhZN
  • TLSH
    T16C15122471C0C4B6D47B413544C9CA72AA76707247BE94DBBBED63B6AF203E167342CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2