Extracted

• • Target
    2026-08-16_a12588b9d471813c616d0603cf8f88d5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 440KB
  • SHA256 4174500ca1616cc384d76b2416c15447d002501b73cbeebcd617ee35af2df973
  • MD5 a12588b9d471813c616d0603cf8f88d5
  • SHA1 b820645709893c52c1f9c0f9bd09e4d89d56f672
  • SHA512 45a8f8380f564d313e69af59301c0038640d1a35084295c36d6f7b7a22c57f55494ff67f7d4f48489dcd5dadf5dd227205111a19a1097e394269d10982000a06
  • SSDEEP 12288:/bE+u6h1Lk70TnvjcsMxdABSnLHOr2fqRVw:/Y+dk70Trc18BSnLW2CRC
  • TLSH
    T102A4012071C1C0B2C4BB113544EACA369E35707247BAD5D7BBDD67BAAE112E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2