Extracted

• • Target
    2026-08-21_f2a130a7725bcb64adf44a1346bc1eee_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 176KB
  • SHA256 d93dea21986825ee43f5f9727d842464ab011e74898f3518c51e8b837556d962
  • MD5 f2a130a7725bcb64adf44a1346bc1eee
  • SHA1 afd34e79e6a1429030687d13b9985e040d8f5545
  • SHA512 6acd5722051bebe1c509dbecd3ef24ce64eb08f3eba1842ebc428b161dbcc459e9c728de2c38927955e5cbde549bcd0dbccd4309b3f1b23cfea6f2429462a6b8
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVu9cnDKW1LgppLRHMl:NrFZaaZmEJuSDKW1LgbdI
  • TLSH
    T1EF04D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2