shodi | 2026-05-31_0122ad1eb33f7c788b60dc1a7af83480_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

General

Target
2026-05-31_0122ad1eb33f7c788b60dc1a7af83480_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar
Size 1.8MB
Sample260531-m7hzxae181
SHA256 ee667c7b70cd4c63cfe8dbebb8aac5c008bd6e452d67b16165da79f2fa7e8a3b
MD5 0122ad1eb33f7c788b60dc1a7af83480
SHA1 dd1434ad414ca229d3d5cce8362dfe42d3c7bb49
SHA512 1a4a89095be5441f2c33051e2d215345f0d7d55d6bcff5ab8519fc0a8c50f495aea6ea75dc3e6c576b6c9363bf0f774b022612686b4553cada1099255845cdc1
SSDEEP 49152:IxgGhqFTTQtTToonbXaI2887eIqZBsEZUB:vPQ/nbXaI2UgH
TLSH
T1A085AE03B7D110B8D45AE175975EA63AEA62F8050731BADF0790AE613F72BE1273E344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-31_0122ad1eb33f7c788b60dc1a7af83480_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

2026-05-31_0122ad1eb33f7c788b60dc1a7af83480_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

.exe 1.8MB

SHA256 ee667c7b70cd4c63cfe8dbebb8aac5c008bd6e452d67b16165da79f2fa7e8a3b
MD5 0122ad1eb33f7c788b60dc1a7af83480
SHA1 dd1434ad414ca229d3d5cce8362dfe42d3c7bb49
SHA512 1a4a89095be5441f2c33051e2d215345f0d7d55d6bcff5ab8519fc0a8c50f495aea6ea75dc3e6c576b6c9363bf0f774b022612686b4553cada1099255845cdc1
SSDEEP 49152:IxgGhqFTTQtTToonbXaI2887eIqZBsEZUB:vPQ/nbXaI2UgH
TLSH
T1A085AE03B7D110B8D45AE175975EA63AEA62F8050731BADF0790AE613F72BE1273E344
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths