Extracted

• • Target
    2026-08-30_f067be5b7685be1c4dc1fe7dc6c0df54_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 901KB
  • SHA256 cf0f0f0685100e97b481a7ebde02f8ba75b438a1a44cf4c6b04250a3ba2af7e5
  • MD5 f067be5b7685be1c4dc1fe7dc6c0df54
  • SHA1 c4c725ec5d47d39517344faf12941b6abc56138b
  • SHA512 480a4a79c2d495d9f05d411713cfa43d3c8e80963c30a4ed831e718630a32a0da5d81534148c6849b6f35764497e3565aff4f91e190c1a0e194c85f4b86be100
  • SSDEEP 24576:/Y+vk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTx:FkQTAKYS/v6h3+1uhZcTx
  • TLSH
    T19E15222471C0C4B7D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2