Extracted

• • Target
    2026-11-13_b517273c113d76d21d0a599907b6907b_coinminer_elex_rhadamanthys_stop
  • Size 144KB
  • SHA256 311a920496c3a659483b4b8cd4040afa1584058b9bfb55f5b239e1d0724fc9b5
  • MD5 b517273c113d76d21d0a599907b6907b
  • SHA1 595e682df030128e1ca0beca0a5b5d36bfb1a516
  • SHA512 c68b9e1af23e227803ce9f41a3d9f8bd69beb7e6cf514f540a0d07d6996ef7a50342c356a5cac7a4e9eec3de9a20e7cbee3dea1662b73f9f631226f2ad103d56
  • SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+0K1xxKY+T6KWl:LJ0TAz6Mte4A+aaZx8EnCGVu0cnDKW1P
  • TLSH
    T1E2E3E120A2D680F2D493627502AD86779D3E1077072EE6E7D7E576A3AD213F1F23608D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2