Extracted

• • Target
    2026-08-31_411d79aa9a55c94bef839b5162434b2e_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 720KB
  • SHA256 cbee7a3ab6cabbc9bd2acc5a2020aaf3acd9b383a9e95e9869afda58283fa7a4
  • MD5 411d79aa9a55c94bef839b5162434b2e
  • SHA1 c0f4eb5f0ee37be35881a4961437a767c7db4879
  • SHA512 8c8fb94c2980d0254701b5ca42a78faa932e78936edb57b853df5c2c2f27a3514d56c238130cc8074ffbc16ab556c20729b565eff694b8f247c30f6f2f4fd158
  • SSDEEP 12288:/bE+uYh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKC8R/:/Y+rk70Trc18BSnLW2CRBKViu99LK1R/
  • TLSH
    T108F4122471C0C0B6D4BB113544D9CA769E7630B247B985DBBBED63EAAF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2