snojan | b7a32f735757af494a5438d8471aac57a91238a5dc965d7694debe78d5ff3e04

General

Target
2026-10-17_df67bfea301b1044a4e3fda9448ba749_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 678KB
Sample261018-ee2mjsfz4k
SHA256 b7a32f735757af494a5438d8471aac57a91238a5dc965d7694debe78d5ff3e04
MD5 df67bfea301b1044a4e3fda9448ba749
SHA1 2b35faa71ab8dec9c7eaf84df533ee43f94a00ba
SHA512 b74322b08f194ce2b24d2524d1777ed001ff3ce51944fc540a00f2120dfbadf6ece72384972031273ae8c50821fe2fcb3321c9943f5496953a2b7a16932819f1
SSDEEP 12288:/bE+uqh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LK1:/Y+Zk70Trc18BSnLW2CRBKViu99LK1
TLSH
T17EE4122071C0C4B6D4BB513544D9CA729A7630B247BD85DBBBED63AAAF203E163352CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-10-17_df67bfea301b1044a4e3fda9448ba749_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 678KB
- SHA256 b7a32f735757af494a5438d8471aac57a91238a5dc965d7694debe78d5ff3e04
- MD5 df67bfea301b1044a4e3fda9448ba749
- SHA1 2b35faa71ab8dec9c7eaf84df533ee43f94a00ba
- SHA512 b74322b08f194ce2b24d2524d1777ed001ff3ce51944fc540a00f2120dfbadf6ece72384972031273ae8c50821fe2fcb3321c9943f5496953a2b7a16932819f1
- SSDEEP 12288:/bE+uqh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTVtYSqvu99LK1:/Y+Zk70Trc18BSnLW2CRBKViu99LK1
- TLSH
  T17EE4122071C0C4B6D4BB513544D9CA729A7630B247BD85DBBBED63AAAF203E163352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2