snojan | a1e39e264741a5f506b0f76ea4a840d92c3b10afa63464f258211860f3f3440c

General

Target
2026-10-16_ec38379e9b7be16746e5fa64db893bdc_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 677KB
Sample261017-d463wswtgy
SHA256 a1e39e264741a5f506b0f76ea4a840d92c3b10afa63464f258211860f3f3440c
MD5 ec38379e9b7be16746e5fa64db893bdc
SHA1 8e08bf8fc04620ea6e17c6b444d7c300430fe44a
SHA512 29455938b30bcbc99876f9db087f8175b4865120b0cd5475335345ccc0c45f1051e85f36b8c54517523f81499ea3cea6c8d24209d9d753b3943eb2b396f48b4f
SSDEEP 12288:/bE+uFh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKb:/Y+6k70Trc18BSnLW2CRBKViu99LKb
TLSH
T166E4122071C1C0B6D4BB513544D9CA729A7630B247B985DBBBED63BAAF203E163352CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-10-16_ec38379e9b7be16746e5fa64db893bdc_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 677KB
- SHA256 a1e39e264741a5f506b0f76ea4a840d92c3b10afa63464f258211860f3f3440c
- MD5 ec38379e9b7be16746e5fa64db893bdc
- SHA1 8e08bf8fc04620ea6e17c6b444d7c300430fe44a
- SHA512 29455938b30bcbc99876f9db087f8175b4865120b0cd5475335345ccc0c45f1051e85f36b8c54517523f81499ea3cea6c8d24209d9d753b3943eb2b396f48b4f
- SSDEEP 12288:/bE+uFh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LKb:/Y+6k70Trc18BSnLW2CRBKViu99LKb
- TLSH
  T166E4122071C1C0B6D4BB513544D9CA729A7630B247B985DBBBED63BAAF203E163352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2