Extracted

• • Target
    2026-11-13_aa51c5307515445e3376ea700bd3797d_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 832KB
  • SHA256 68d09706032eda5868c69680e5071a6c1726689ea04e38ca78e9dbea3c76fcdc
  • MD5 aa51c5307515445e3376ea700bd3797d
  • SHA1 3bd3ccf5e0ef98c8160f839f3e1cc547ea20cb39
  • SHA512 368bde64689e0063bdc3842a885594edb53a1c894af7537dc6e44b1a1de0d8cc9390d7824065d4d39f736498d0371b1995752b94509775b643437f9872a6b78e
  • SSDEEP 24576:/Y+6k70Trc18BSnLW2CRBKViu99LK1Rad6yZ2:gkQTAKYS/v6h3+1uhZ2
  • TLSH
    T15905222470C0C4B6D47B013544C9CB76AA76707247BA94DBBBDD63B6AF203E1A3352CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2