snojan | 042773e1a7f853a368066b0e320627accca08c24c5f71b2cb944d197b0c41b4b

General

Target
2026-09-30_3b0ea7fe8e178976fdff18cc9ba65dc5_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 192KB
Sample260930-pexcyatv9m
SHA256 042773e1a7f853a368066b0e320627accca08c24c5f71b2cb944d197b0c41b4b
MD5 3b0ea7fe8e178976fdff18cc9ba65dc5
SHA1 817a33a49e247f76782c58d9fec939bc7fdb570e
SHA512 f47cb107fe68ee4e48aa2697d0d1c3d45568d176f3919df0a82d7371e626b78a068959eba75287443be242b8f2d9d1d20466ebe2d3f82c4125cf6dd89a9828e1
SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuscnDKW1LgppLRHMY0G:NrFZaaZmEJubDKW1Lgbdl0G
TLSH
T15014D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-09-30_3b0ea7fe8e178976fdff18cc9ba65dc5_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 042773e1a7f853a368066b0e320627accca08c24c5f71b2cb944d197b0c41b4b
- MD5 3b0ea7fe8e178976fdff18cc9ba65dc5
- SHA1 817a33a49e247f76782c58d9fec939bc7fdb570e
- SHA512 f47cb107fe68ee4e48aa2697d0d1c3d45568d176f3919df0a82d7371e626b78a068959eba75287443be242b8f2d9d1d20466ebe2d3f82c4125cf6dd89a9828e1
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuscnDKW1LgppLRHMY0G:NrFZaaZmEJubDKW1Lgbdl0G
- TLSH
  T15014D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2