Extracted

• • Target
    2026-11-05_556521a50203e1ca55f01766326ee7f8_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 449KB
  • SHA256 75591dcd8b78319536f2922cef5dae79748d9484afd1c7fb4f91569d22357621
  • MD5 556521a50203e1ca55f01766326ee7f8
  • SHA1 5ca61e92566e35cd9a670390cfc0b5f91f8d9a85
  • SHA512 e5bfe141df26ce48d5d24880508a4bc679792762f0ba446360188c0f94f44b634e3968ff8644e490541a3a19072e23e97785a65d9e303872b33612a5b3e55d93
  • SSDEEP 12288:/bE+u3h1Lk70TnvjcsMxdABSnLHOr2fqRV/:/Y+8k70Trc18BSnLW2CR1
  • TLSH
    T12BA4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2