Extracted

• • Target
    2026-08-17_6156c9e928dd310a2b44c64d5a415473_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 905KB
  • SHA256 5b905cf53220fb0d82d095cda15684e531fe7cc4b3955fe8c95a21df9ba27537
  • MD5 6156c9e928dd310a2b44c64d5a415473
  • SHA1 fb0243c0f22bcfbc68829bb7e2f90d2f9f5c4e84
  • SHA512 6e37b065547d750ef655cbcdcf2c1295346e062f433b8dc36623f636dc9d5bfe2bbb0c61206a51831d6d171022355065743cfba0a461d193bec339d595864fdf
  • SSDEEP 24576:/Y+7k70Trc18BSnLW2CRBKViu99LK1Rad6yZcT0:lkQTAKYS/v6h3+1uhZcT0
  • TLSH
    T12515222471C0C4B3D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2