Extracted

• • Target
    2026-08-21_ba3778e03df8452d5faad007985d7445_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 896KB
  • SHA256 5dab963540754c788efe9f8ce0d4d37d4e8493b9f79dd71db36383d434261212
  • MD5 ba3778e03df8452d5faad007985d7445
  • SHA1 98ce0d31c0779869b201536cd074f444f3a9828a
  • SHA512 5c69ee83a918e673f82d39fd4a546dc48e08c54e426c5590738c24e62f0ae04800c4f923d18fc42601271217f0916908a957d1d725bdb3b2681333a246beb476
  • SSDEEP 24576:/Y+Ek70Trc18BSnLW2CRBKViu99LK1Rad6yZcTW:KkQTAKYS/v6h3+1uhZcTW
  • TLSH
    T1C515222471C0C4B2D477413544C9CA72AA76707247BE99DBBBED63B9AF203E163352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2