Extracted

• • Target
    2026-11-11_897d6e7d2091fe4aefc8b06aab8f1123_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 576KB
  • SHA256 e9e843e7dc1664b38e1f1c01ed9ca070ccaff0aa7eda99319f1255b7488678cd
  • MD5 897d6e7d2091fe4aefc8b06aab8f1123
  • SHA1 1c07a249c0a63c48bea6637cb5ced2ff2e90da0f
  • SHA512 ba7a46f3340b8a16f1e5e7817fc41ec5027161a5c2f46ca6def93769f76ec82dde05bd71d3a540266c568b0a693de1fda42440fc0c5d585bdf5a6597c9bbea8f
  • SSDEEP 12288:/bE+uIh1Lk70TnvjcsMxdABSnLHOr2fqRVnRj1wTV1:/Y+rk70Trc18BSnLW2CRBKV1
  • TLSH
    T16AC4022071C1C077D4BB013544E9CA769A7630B247B995DBBBDC67BAAF202E1A3352CD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2