Extracted

• • Target
    2026-08-17_ac5185ef155d72f02bd41e7ac6d0fb85_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 320KB
  • SHA256 d071164b771ba0b2702f90309044be32306bc60ce504892c1bfe09da0e71b368
  • MD5 ac5185ef155d72f02bd41e7ac6d0fb85
  • SHA1 93c4adc973c9180853197f9e149aa649f2567d7a
  • SHA512 9628b03569ab08c744e30fb6a6f99e5cf852cc807ea474616236a1d5aeeb2fc229c06006b0045e05288425317581242b00425cd6b9981dd3283b5f3f1e89ad5f
  • SSDEEP 6144:NrFZaaZmEJudDKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLYS:/bE+uVh1Lk70TnvjcsMxdABSnLP
  • TLSH
    T1D364F12071C1C1B3C4B7013544EACA769A76707207BA95D7BBDD27BAAE113E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2