Extracted

• • Target
    2026-08-07_0e71e9cef78c981ebfb8c2e11dd89e06_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 960KB
  • SHA256 2fa7cb0d7f7d9279ee00cf0fdb37b52eb4571e96ea4bb758bf5013408c384d02
  • MD5 0e71e9cef78c981ebfb8c2e11dd89e06
  • SHA1 dfa2aceb61ed32fd70e6560751cecd36233f44a8
  • SHA512 26459af2143669b517940dda67556aad466b10e351acc3bb2482b89855101334fc67fdbc08a78f6fe0ac42f34a9ae67d161b38d0161f6ea7931eeed3ee5d59f1
  • SSDEEP 24576:/Y+4k70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhdr:6kQTAKYS/v6h3+1uhZcT2Nnr
  • TLSH
    T1F025222470C0C4B6D46B413644C9CA76A976B07247BE89DBBBED63F5AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2