Extracted

• • Target
    2026-10-22_6a631221f949bb8a1a5d0c460a6762e5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 576KB
  • SHA256 dd03bb315d2d27f6e1f4df271b4de83a27228a139750114d8c65d37f549d4737
  • MD5 6a631221f949bb8a1a5d0c460a6762e5
  • SHA1 398b5ee5bf772a4edd46d9672ae5a3ce17c89a49
  • SHA512 6d8b7094764456f42f839ef6d714287786829afefdbe45fca9ff0feee33def189c33208570137eaf49c4e724d98e7f15025ebf5bbda49ded29cc4eb039b52551
  • SSDEEP 12288:/bE+udh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+uk70Trc18BSnLW2CRBKV1
  • TLSH
    T1A1C4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2