Extracted

• • Target
    2026-11-13_d1500153e56b301f1456b7c3c4744e7c_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 6c671bbc8b35a535e3640c731a783c58e16cac217ff61e88188b536722c312c0
  • MD5 d1500153e56b301f1456b7c3c4744e7c
  • SHA1 9055cd57dbe976c52ea2b1836e1493c4cb49f905
  • SHA512 60101929e7842c46d548393a84846bc8a4062713b90a9a2efdc0edc6e40473314a715c5122c1e5dc1a3f95154775b77f9ef7f2110ce63d8cb5539b5a8dfcc6ff
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuycnDKW1LgppLRHMY0G:NrFZaaZmEJuxDKW1Lgbdl0G
  • TLSH
    T19414D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2