Extracted

• • Target
    2026-11-13_871e806263ede71e3d833303c21002f4_coinminer_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 416KB
  • SHA256 50aae1fbdc33f52a44432cc30ba0579ff681aad9c367e0f6b4f552ab3d23595d
  • MD5 871e806263ede71e3d833303c21002f4
  • SHA1 08046830b506505e2d32373e66efb638b686496f
  • SHA512 34c7beb7e068920cb5d6b86c9adf658be4f91d3658c07a47627b9e8c3ff09f01fa9074ec8b4329a975daadee036a8d045bfa03a450e77ff1a21021bc3cb6eb1b
  • SSDEEP 12288:/bE+u/h1Lk70TnvjcsMxdABSnLHOr2fqb:/Y+Qk70Trc18BSnLW2Cb
  • TLSH
    T1BA94F12071C0C0B2D4BB113544EACA7A9A36707247B9D5D7BBDC67BA6E113E1A3352CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverydownloadersnojanupx

  • Family: Snojan

    Snojan is a downloader used to drop and execute other malware.

    downloadersnojan
  • Custom signature

    UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2