Extracted

• • Target
    2026-11-05_4e6feebfbfd46f6e8f5d60ef4ed5ade5_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 902KB
  • SHA256 b507918c15769e60c98551303cb601bc596191d789e89bd4be2679a585dcbb32
  • MD5 4e6feebfbfd46f6e8f5d60ef4ed5ade5
  • SHA1 557d32260a3f9415377432406867b3bc2c0b60dc
  • SHA512 26401ba69fe75c35398228ac5dc0f34d6ec07b9cca43672d95f4d01a608521aa358faf85614cf421ef6ddd7d16ba726139229349a94c1be797784237ed38f01c
  • SSDEEP 24576:/Y+Mk70Trc18BSnLW2CRBKViu99LK1Rad6yZcTM:ykQTAKYS/v6h3+1uhZcTM
  • TLSH
    T1B215222471C0C4B6D46B413544C9CA72AA76707247BE99DBBBED63B9AF203E163342C9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2