shodi | 2026-06-29_c6fc4285172f15f724e7e0271fc55b65_akira_cloudeye_elex_rhadamanthys_vidar

General

Target
2026-06-29_c6fc4285172f15f724e7e0271fc55b65_akira_cloudeye_elex_rhadamanthys_vidar
Size 2.6MB
Sample260630-eael8aev5k
SHA256 c5993d16cc9511d9a42f2e8d6d2060a07497a65560ea622136b0427cea440758
MD5 c6fc4285172f15f724e7e0271fc55b65
SHA1 f3f0df91d97015fade207beaa2ef92baa44e3ad8
SHA512 e152f63e7c93eed7c2e16fb32409ae835be382861f456ff5ff82ff07e8bcf4cc21a57b47d22c1f1d628cb84229759392ed322c6c2f5b3a4a835926609d60ee0f
SSDEEP 49152:xxgGhqFTTHbXsSMf/lLo51rBmm2y6i1zuajsauZnJ3:EPHbXsv/h4tZ2tH
TLSH
T17FC58E467288C168E461D1BCE6B56CA6D530B42613316DCBFBC07D396A33FC26E39B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_c6fc4285172f15f724e7e0271fc55b65_akira_cloudeye_elex_rhadamanthys_vidar

2026-06-29_c6fc4285172f15f724e7e0271fc55b65_akira_cloudeye_elex_rhadamanthys_vidar

.exe 2.6MB

SHA256 c5993d16cc9511d9a42f2e8d6d2060a07497a65560ea622136b0427cea440758
MD5 c6fc4285172f15f724e7e0271fc55b65
SHA1 f3f0df91d97015fade207beaa2ef92baa44e3ad8
SHA512 e152f63e7c93eed7c2e16fb32409ae835be382861f456ff5ff82ff07e8bcf4cc21a57b47d22c1f1d628cb84229759392ed322c6c2f5b3a4a835926609d60ee0f
SSDEEP 49152:xxgGhqFTTHbXsSMf/lLo51rBmm2y6i1zuajsauZnJ3:EPHbXsv/h4tZ2tH
TLSH
T17FC58E467288C168E461D1BCE6B56CA6D530B42613316DCBFBC07D396A33FC26E39B16
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths