Extracted

• • Target
    2026-11-07_ba5cf81d89f95a518f7388b2e12fd99e_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 480KB
  • SHA256 42ae718132fdceaf0f9bfa59a130d947245a497855d59d3e686b9a5fbe11aee3
  • MD5 ba5cf81d89f95a518f7388b2e12fd99e
  • SHA1 6a97c8a77032d97519385fe47c8f9a73f8b5ec8d
  • SHA512 4f4a9dac9bda1274cec7bd0357bd371e5687f111010b96258cb752873c4e0e9ce1c113a9af98c7af539f04c838712faa9939d04772c4d2fcb1ee97a6dc502283
  • SSDEEP 12288:/bE+uth1Lk70TnvjcsMxdABSnLHOr2fqRVnRH:/Y+Kk70Trc18BSnLW2CRBF
  • TLSH
    T1C4A4012071C1C0B7D4BB113544EACB369A36707247B9D5DBBADC67BA6E202E163352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2