Extracted

• • Target
    2026-08-14_bf2470a47db159bc4167fab6f3b2423c_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 448KB
  • SHA256 3aa07f7840ce4a70f3c7daaeb4de2da8633f21e0720ce61cac86645a03c5cefe
  • MD5 bf2470a47db159bc4167fab6f3b2423c
  • SHA1 992a5d77bd56596f6e7a552f7f61badca9082f74
  • SHA512 04f20534653d1ef2ff9ca5e61e2e39dbfb2a8b1081ed2e48abace3cb06ff22062a5c1e7d3ea9350226a67742db860c9ad8a42299f4c51d7c714c195a3d91e018
  • SSDEEP 12288:/bE+udh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y++k70Trc18BSnLW2CRy
  • TLSH
    T1BAA4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2