Extracted

• • Target
    2026-10-19_e6a78c5ed02153082b58f0c7082c6af5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 576KB
  • SHA256 a4cf0d224e13b0cc4f09c392fd72326660b2bf63c9bedeab471d0acf2292fe96
  • MD5 e6a78c5ed02153082b58f0c7082c6af5
  • SHA1 1a6990b8bdbf60ee2f975f1840d24b7bcc24d401
  • SHA512 a09560b39806b6a53a9db3e24da8203fa8773e9c32c2875b66313c4368d094728b714b5979985934968458b50c656e1a28e998cbe0646c8d6502e32097841457
  • SSDEEP 12288:/bE+uSh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+tk70Trc18BSnLW2CRBKV1
  • TLSH
    T174C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2