Extracted

• • Target
    2026-08-22_ddc5dd57bb733a36317ac5efcc6fcc7a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 832KB
  • SHA256 d64d102354c02b8108395bcde49b52fe04f0ebc1a301e27c1087b0aa069e8ca6
  • MD5 ddc5dd57bb733a36317ac5efcc6fcc7a
  • SHA1 274510f365169162799e02bccbeb3b8011ae4637
  • SHA512 bc230e56a1f1a528210172e0050fe188cedf3585528b42016ac2bf149f9f0707d30202c1c5f986cae739e827b78c8efb67150aac74c6fecfd87c450b334850f7
  • SSDEEP 24576:/Y+wk70Trc18BSnLW2CRBKViu99LK1Rad6yZ2:GkQTAKYS/v6h3+1uhZ2
  • TLSH
    T11905222470C0C4B6D47B413544C9CB76AA76707247BA94DBBBDD63B6AF203E1A3352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2