Extracted

• • Target
    2026-11-11_26f5ca1d7725784e1451dafb7807b0c3_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 897KB
  • SHA256 62f625242900c13acd415b43d88e35536ca45c271736ec866b721428c6da1208
  • MD5 26f5ca1d7725784e1451dafb7807b0c3
  • SHA1 67f119783301e79a3ea8f6247a48fc0abc863adb
  • SHA512 7ece9663d64eb8eccf445f760817712add3756805978fa8bd9200e4f9dc056d59a0232fab931ebbe87b9ec03ce87bb52fabf260bc9c1d7bbb6532e664b40cdf4
  • SSDEEP 24576:/Y+ok70Trc18BSnLW2CRBKViu99LK1Rad6yZcTT:mkQTAKYS/v6h3+1uhZcTT
  • TLSH
    T1C115222471C0C4B2D477413544C9CA72AA76707247BE99DBBBED63B9AF203E163352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2