Extracted

• • Target
    2026-11-13_8f89288c38f8ca49d02811378f6abe3c_coinminer_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 192KB
  • SHA256 82984dd73c72f4180b1661653d1808dc8248e24ec17fe78ee495fe42aa395aac
  • MD5 8f89288c38f8ca49d02811378f6abe3c
  • SHA1 faae99d0dc50d649fed232546eb3f6ca195a91c5
  • SHA512 3261e3225a502b976152cd24ca3e77d1583a95dab058171cc1cf150fbe89e6ea80c771e61813d1467f4f5a86bdd073f4fb7a14ab7541b9f26d7ae2752d21e27b
  • SSDEEP 3072:LJ0TAz6Mte4A+aaZx8EnCGVuxcnDKW1LgppLRHMY0G:NrFZaaZmEJueDKW1Lgbdl0G
  • TLSH
    T16514D12472C2C1B3C49721754169CB76AE7D5072033EE6DBE7E62AB26E213E1E33518D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2