Extracted

• • Target
    2026-10-26_e5aa54441e156fbf0f9f8624d755fedf_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 960KB
  • SHA256 20a51fe350ff8adf03847583af5f6c3a138276c28290b40be68eaed4c71fdc9e
  • MD5 e5aa54441e156fbf0f9f8624d755fedf
  • SHA1 c3789fdf6f59a4acd924b95995591542bfa4e56b
  • SHA512 6a1de1c522dcf9b37a73616c6da7ff1b27b33f69cbe64aca1800ca35beaf7d213fa931ddb28658f10f7861f713b2df7590ec0b8159f3e3aef12e59bfca6f55cb
  • SSDEEP 24576:/Y+Ok70Trc18BSnLW2CRBKViu99LK1Rad6yZcT29fhdr:skQTAKYS/v6h3+1uhZcT2Nnr
  • TLSH
    T18425222470C0C4B6D46B413644C9CA76A976B07247BE89DBBBED63F5AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2