Extracted

• • Target
    2026-11-02_6ee88ccdf10d06d0bc4accb2896492b8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 449KB
  • SHA256 8cc37946b8f329d6c1e664ed547d432f939f0782e5d5ec17a9395667f96ee863
  • MD5 6ee88ccdf10d06d0bc4accb2896492b8
  • SHA1 921a53887115a3ea12596bf9796e70a1722923d6
  • SHA512 24a90c6c7302b6e4005bb9b456c8d9712a14d260ac9bc52eaa887664e0020700f7e560995ab74eb0583eed8d49cca13d512c51dde3ce73ee879fc20663e063d3
  • SSDEEP 12288:/bE+uHh1Lk70TnvjcsMxdABSnLHOr2fqRV/:/Y+Qk70Trc18BSnLW2CR1
  • TLSH
    T145A4022071C1C0B2C4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2