Extracted

• • Target
    2026-08-06_ad02d867d61538458aed2c8440f9ec5b_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 4829cdfdb078040fc1a40397c2b0b20d00e69444186b19615e3dc67a4fc255a5
  • MD5 ad02d867d61538458aed2c8440f9ec5b
  • SHA1 fa5ecf11751eed9e7259cc0acd7899b31f41ace7
  • SHA512 5b9699a9c4a069967cacd4a992dac5b22127d0f0a297191df3d019e54347a5ab060eb73160aeb7f0bd879085213b0a9b35d74c57ea613d503675a97054ce7c5a
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVulcnDKW1LgppLRHMY0G:NrFZaaZmEJuKDKW1Lgbdl0G
  • TLSH
    T1B714D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2