Extracted

• • Target
    2026-11-10_f03384dc6a70fcac0b839e58e5c18f01_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 176KB
  • SHA256 077d71c14b5210dc451c564ec7c6d760fd3fff15fed31d829dbb90bb8beae663
  • MD5 f03384dc6a70fcac0b839e58e5c18f01
  • SHA1 45ab23e701efabcc6110232352610fca48522d83
  • SHA512 3108b1f1e9c247eebe33b16bcebe8dc47d237a7e521363a99897ca2cff91efb5d770a4781f3f02f39c779c64534e900301120b473a5e7f82f229dc390e5670c4
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuicnDKW1LgppLRHMl:NrFZaaZmEJuhDKW1LgbdI
  • TLSH
    T18F04D12071C2C0B7D4972175426A87739E7D1076073EE6E7EBE62AB29E213E1E33614D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2