Extracted

• • Target
    2026-10-28_f9ddb7abec5ac733d368cc89b4d8974a_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 483KB
  • SHA256 b335c819d70a20ac6166ab09fa1444cb597107bf3e314177daa67bc0a972e472
  • MD5 f9ddb7abec5ac733d368cc89b4d8974a
  • SHA1 6b72beb037727c2723d9b7446400a75123734979
  • SHA512 606ecda96a5bc938e238b7861cc0442342f720bfb2df38646034e1936c2a2d355737fd7cb7964490d88023117076574114d498763005c4b5bc1372627f1f2384
  • SSDEEP 12288:/bE+uzh1Lk70TnvjcsMxdABSnLHOr2fqRVnRR:/Y+Ik70Trc18BSnLW2CRBv
  • TLSH
    T185B4012071C1C0B6D4BB113544EACB369A36707247B9D5DBBADC67BA6F202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2