shodi | 2026-05-31_04a7e5488d2e32b3e29cbe603af78f43_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-05-31_04a7e5488d2e32b3e29cbe603af78f43_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 1.5MB
Sample260531-plnpdaay2l
SHA256 905e8c826f35d086b97514251b42762456665019586cd62797c3174fa7fe2c05
MD5 04a7e5488d2e32b3e29cbe603af78f43
SHA1 d4a9d862c0c01bbdf5d8da400cdd1cd596c7c993
SHA512 136c99afadc8f20e3dc6e1b56a8deacef98bb052401c3df64bee04eeb1ef502e840e1265474c33adba037691a4054ca6a4850e298eeb7f6bdc4f8d23d98dc74e
SSDEEP 12288:eYixUrHGQVL9f+E9UuFuUGx+zR5JeKsghPBC60jr2Ybtre5MAGRNWYbuT71GBnoB:uxal9fpjk+hexgXWTktfCF1GPriLo
TLSH
T131753812B9828638D056407956999FBD951ABC25CF230EC72B907EDEFBE03C11E35B36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-31_04a7e5488d2e32b3e29cbe603af78f43_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-05-31_04a7e5488d2e32b3e29cbe603af78f43_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 1.5MB

SHA256 905e8c826f35d086b97514251b42762456665019586cd62797c3174fa7fe2c05
MD5 04a7e5488d2e32b3e29cbe603af78f43
SHA1 d4a9d862c0c01bbdf5d8da400cdd1cd596c7c993
SHA512 136c99afadc8f20e3dc6e1b56a8deacef98bb052401c3df64bee04eeb1ef502e840e1265474c33adba037691a4054ca6a4850e298eeb7f6bdc4f8d23d98dc74e
SSDEEP 12288:eYixUrHGQVL9f+E9UuFuUGx+zR5JeKsghPBC60jr2Ybtre5MAGRNWYbuT71GBnoB:uxal9fpjk+hexgXWTktfCF1GPriLo
TLSH
T131753812B9828638D056407956999FBD951ABC25CF230EC72B907EDEFBE03C11E35B36
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths