Extracted

• • Target
    2026-11-05_5d844f405636ed4d2baed04e21075104_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 203KB
  • SHA256 6df8d5284da0330afd963c31300f11c952fe177c425acae31009dec022c9c919
  • MD5 5d844f405636ed4d2baed04e21075104
  • SHA1 04e08555c893778676ad42e5205a38071c274d19
  • SHA512 cebf7896310fc2c38d3e56f083ffbf8cbcfbe9ee32636bfa41fb8aba86647624700669ec8f95686d5bf493885b3a8719dfef51df18629f5bd224f8a0c8d3f86f
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuicnDKW1LgppLRHMY0TBfJvjo:NrFZaaZmEJuhDKW1Lgbdl0TBBvjo
  • TLSH
    T1D014D02161C1C2B3C4B7113441EA8B7A9F7D7076036AAAD7A7DD26B25E203E1B3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2