Extracted

• • Target
    2026-11-07_dfc659f5dcaf46349ba4956e70b35741_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 448KB
  • SHA256 c126771069b24a85328d64c415b69b07a2c0bb594860f7e898652a110ac053fb
  • MD5 dfc659f5dcaf46349ba4956e70b35741
  • SHA1 6d93340e01eba34ec9dd5e389f88233313db0818
  • SHA512 4f49e97b0f3287bf145acc39cc2e8bdfc0dc933688ff3e0fd068042b414c4069dadde473f719980cc6ca31b5dd2200c53cfb0ebc637bd7a443c11e117f40a002
  • SSDEEP 12288:/bE+uAh1Lk70TnvjcsMxdABSnLHOr2fqRVs:/Y+bk70Trc18BSnLW2CRy
  • TLSH
    T1CEA4022071C1C0B2D4BB113544EACA369E36707247B9D5DBBBDD67B66E202E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2