snojan | 691b315c5a0219eaab0fbd093b0ecbb5add4bbb07422e0a8f28c46f4cd1c40d7

General

Target
2026-11-08_474843ce3c970ae466d7217d83c0c1e2_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 368KB
Sample261109-e2yjeatw2j
SHA256 691b315c5a0219eaab0fbd093b0ecbb5add4bbb07422e0a8f28c46f4cd1c40d7
MD5 474843ce3c970ae466d7217d83c0c1e2
SHA1 0a6e4282d334233de6a5a416c39272594f5610c9
SHA512 b1efe24164173bf60025f245a3073c6957d9cb2acd72a6b7aa5606ecbc2352d0850b6ebcf969f4d0a5fae89351f0b11a2616db71249d70babfffdd9a2558577b
SSDEEP 6144:NrFZaaZmEJuADKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uGh1Lk70TnvjcsMxdABSnLHOr26
TLSH
T13284F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

snojan

C2

http://wecan.hasthe.technology/upload

Targets

- Target
  2026-11-08_474843ce3c970ae466d7217d83c0c1e2_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 368KB
- SHA256 691b315c5a0219eaab0fbd093b0ecbb5add4bbb07422e0a8f28c46f4cd1c40d7
- MD5 474843ce3c970ae466d7217d83c0c1e2
- SHA1 0a6e4282d334233de6a5a416c39272594f5610c9
- SHA512 b1efe24164173bf60025f245a3073c6957d9cb2acd72a6b7aa5606ecbc2352d0850b6ebcf969f4d0a5fae89351f0b11a2616db71249d70babfffdd9a2558577b
- SSDEEP 6144:NrFZaaZmEJuADKW1Lgbdl0TBBvjc/YVM66dAFlJTSRUYzLY6hOfvb2wh:/bE+uGh1Lk70TnvjcsMxdABSnLHOr26
- TLSH
  T13284F12071C0C1B2D4BB113544EACA769A76707207B9D5DBBBDC27BAAE113E163352CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader snojan upx
- Family: Snojan
  Snojan is a downloader used to drop and execute other malware.
  downloader snojan
- Custom signature
  
  UPX dump on OEP (original entry point)
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Snojan

UPX dump on OEP (original entry point)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2