shodi | 2026-06-29_cfda6ea3f7f4fee75d7839e1e1ecc56e_akira_cloudeye_elex_rhadamanthys_vidar

General

Target
2026-06-29_cfda6ea3f7f4fee75d7839e1e1ecc56e_akira_cloudeye_elex_rhadamanthys_vidar
Size 1.9MB
Sample260630-dtmlhad18m
SHA256 9dd02de2b6276fe48c564c6d109bc4f9d9bed68d3f1fcea80ad9159a39524b7d
MD5 cfda6ea3f7f4fee75d7839e1e1ecc56e
SHA1 84980bf9722cb75d6d6afa0030c06f115b762ff6
SHA512 2d10699d0260e73cb9fbce34f2cd1e0469d3933aa4f0068b5b2ffca6e3269a68248767cc2bef5ffbebf353ec48a4cd188cc47f6f3a957af873d23c6b69c5333f
SSDEEP 24576:xxal9vGhqF3DTHbXsS/yhyufHB7PvUM3X6t5KSmeiNKmir0rYn5h:xxgGhqFTTHbXsSMf/lLo51rBmmIY5h
TLSH
T152957D967645C124E451E1BCA5B96CF5A924B86603312DCBFFC07D216A32FC3BE3A316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_cfda6ea3f7f4fee75d7839e1e1ecc56e_akira_cloudeye_elex_rhadamanthys_vidar

2026-06-29_cfda6ea3f7f4fee75d7839e1e1ecc56e_akira_cloudeye_elex_rhadamanthys_vidar

.exe 1.9MB

SHA256 9dd02de2b6276fe48c564c6d109bc4f9d9bed68d3f1fcea80ad9159a39524b7d
MD5 cfda6ea3f7f4fee75d7839e1e1ecc56e
SHA1 84980bf9722cb75d6d6afa0030c06f115b762ff6
SHA512 2d10699d0260e73cb9fbce34f2cd1e0469d3933aa4f0068b5b2ffca6e3269a68248767cc2bef5ffbebf353ec48a4cd188cc47f6f3a957af873d23c6b69c5333f
SSDEEP 24576:xxal9vGhqF3DTHbXsS/yhyufHB7PvUM3X6t5KSmeiNKmir0rYn5h:xxgGhqFTTHbXsSMf/lLo51rBmmIY5h
TLSH
T152957D967645C124E451E1BCA5B96CF5A924B86603312DCBFFC07D216A32FC3BE3A316
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths