Extracted

• • Target
    2026-09-08_6def326e9abd5259f9393e2459bdfa99_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1024KB
  • SHA256 58946266d5b5296d1c704948775a416ce1c5fc7f0e079afe62b64673130c611f
  • MD5 6def326e9abd5259f9393e2459bdfa99
  • SHA1 3b03f40a82d7459d1f9b3f17596933d19bca0ab9
  • SHA512 0c02db3299501b32913f2ee4ec0f331c3df525361452128af5854aaaa86294cb36deffd91e31a5b09059faef8b6ebecb740f36d5bc92c4a24c9241f0d511715c
  • SSDEEP 24576:/Y+Kk70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhducOq:skQTAKYS/v6h3+1uhZcT2NnvOq
  • TLSH
    T1FD25222471C0C4B3E46B503544C9CA76AA76B072477E89DBBBED63E5AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2