snojan | 35b4cba2c8701c797d5b8bedae22b59547fe4f71302a84b0a345e093d15a8239

General

Target
2026-11-03_918fab6f6d6fc4c83f8956a03785a7a5_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 192KB
Sample261104-q3j8ysc13n
SHA256 35b4cba2c8701c797d5b8bedae22b59547fe4f71302a84b0a345e093d15a8239
MD5 918fab6f6d6fc4c83f8956a03785a7a5
SHA1 ae5cee9e306f4c4f649402487fb9d7482826b4c0
SHA512 4695a23225853f361b207700d2cfaf8fe53366560fd8ad5804d22b462bf69e1defcf9f114bd4787257ec5e264d20d908a92c76ffdadfe6616a449fea7901c6c7
SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuScnDKW1LgppLRHMY0G:NrFZaaZmEJuRDKW1Lgbdl0G
TLSH
T15414D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-11-03_918fab6f6d6fc4c83f8956a03785a7a5_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 192KB
- SHA256 35b4cba2c8701c797d5b8bedae22b59547fe4f71302a84b0a345e093d15a8239
- MD5 918fab6f6d6fc4c83f8956a03785a7a5
- SHA1 ae5cee9e306f4c4f649402487fb9d7482826b4c0
- SHA512 4695a23225853f361b207700d2cfaf8fe53366560fd8ad5804d22b462bf69e1defcf9f114bd4787257ec5e264d20d908a92c76ffdadfe6616a449fea7901c6c7
- SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuScnDKW1LgppLRHMY0G:NrFZaaZmEJuRDKW1Lgbdl0G
- TLSH
  T15414D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2