Extracted

• • Target
    2026-10-28_b3ccd65bc3f12c89a58d5dadcc0d7428_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 900KB
  • SHA256 8cb28ff32d40b507fca34e6a111d950a73d23339f6fa82e6304cb9f657435dbe
  • MD5 b3ccd65bc3f12c89a58d5dadcc0d7428
  • SHA1 996cf075095de1bc04ee83b6f9c7438ddda37177
  • SHA512 fb513f88d28f9b30a4400486e2e0481945617fb3cfff9a9a61c191fe133f1d9950ea9ad442c2cc5b24788c6d07f1d4fb823d84f2b07738810ecff6f464eecee8
  • SSDEEP 24576:/Y+Vk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTA:DkQTAKYS/v6h3+1uhZcTA
  • TLSH
    T10815222471C0C4B7D46B413544C9CA72AA36707247BE99DBBBED63B9AF203E163352C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2