Extracted

• • Target
    2026-08-10_5b1869549ed819b069719d6d930142b0_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 901KB
  • SHA256 35d2a8c44b36a663784dcbea416039998f47e3c8250062354587da90e87b3246
  • MD5 5b1869549ed819b069719d6d930142b0
  • SHA1 db1472fe0c3d5737bc06cc7324bb2d73c258b0ef
  • SHA512 4ddb3dec9203856a4bf7b7cc314f8ac042f58a484eb86070911a6a1e3c3c7e0d9e44cd73d0dfc7ce1188ee639424d4d9128042d4ea3ada74c5cacf557b7d8b7a
  • SSDEEP 24576:/Y+hk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTx:DkQTAKYS/v6h3+1uhZcTx
  • TLSH
    T16015222471C0C4B7D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2