snojan | de9c1f165f766914cbdd28f758df2b24da97c18ce2307a38b8103a5c6b082669

General

Target
2026-11-02_9585231a9d1bbbea25eb454938164b61_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 576KB
Sample261103-e1gt9sht7l
SHA256 de9c1f165f766914cbdd28f758df2b24da97c18ce2307a38b8103a5c6b082669
MD5 9585231a9d1bbbea25eb454938164b61
SHA1 62bcbb868b4f3df17c9d9b1b18ca047124e0120d
SHA512 204ed1b8f9d21631b82275a304cdba8e9e2f95a28e8a182f8cfdaf7477ecae162212e4d2704e09a76c91aec6ae9c9be23101b361b12c12bcf8ae0a8653b26588
SSDEEP 12288:/bE+uFh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+Kk70Trc18BSnLW2CRBKV1
TLSH
T19AC4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-11-02_9585231a9d1bbbea25eb454938164b61_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 576KB
- SHA256 de9c1f165f766914cbdd28f758df2b24da97c18ce2307a38b8103a5c6b082669
- MD5 9585231a9d1bbbea25eb454938164b61
- SHA1 62bcbb868b4f3df17c9d9b1b18ca047124e0120d
- SHA512 204ed1b8f9d21631b82275a304cdba8e9e2f95a28e8a182f8cfdaf7477ecae162212e4d2704e09a76c91aec6ae9c9be23101b361b12c12bcf8ae0a8653b26588
- SSDEEP 12288:/bE+uFh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+Kk70Trc18BSnLW2CRBKV1
- TLSH
  T19AC4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2