shodi | 2026-06-29_c1758e65cb9f2efba98079b8d19be570_akira_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-06-29_c1758e65cb9f2efba98079b8d19be570_akira_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 3.2MB
Sample260630-ej17ksd181
SHA256 54161015b7ea43a9529c8b57e71e93e2a33b17edf89e33b85267f6ba305a02f7
MD5 c1758e65cb9f2efba98079b8d19be570
SHA1 cdd003d2eb081404c3670e1b87ac0d9815f6eaeb
SHA512 17a8651f52b7283f38d7a3f81ab218b7642613eab68c3b3c2f5cb1e9453f989e4bf9215e7cd723d292e499ab32f1069bd299c55074fa5797e4be32db2ef63cd4
SSDEEP 49152:IxgGhqFTT2Td+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyR:vP0Y0oAaldmdmnpR
TLSH
T198F54903A29944E9D15AC138CE468132EB627C5D47F265FF3690BAD63E77AD03B3A710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_c1758e65cb9f2efba98079b8d19be570_akira_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-06-29_c1758e65cb9f2efba98079b8d19be570_akira_cloudeye_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 3.2MB

SHA256 54161015b7ea43a9529c8b57e71e93e2a33b17edf89e33b85267f6ba305a02f7
MD5 c1758e65cb9f2efba98079b8d19be570
SHA1 cdd003d2eb081404c3670e1b87ac0d9815f6eaeb
SHA512 17a8651f52b7283f38d7a3f81ab218b7642613eab68c3b3c2f5cb1e9453f989e4bf9215e7cd723d292e499ab32f1069bd299c55074fa5797e4be32db2ef63cd4
SSDEEP 49152:IxgGhqFTT2Td+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyR:vP0Y0oAaldmdmnpR
TLSH
T198F54903A29944E9D15AC138CE468132EB627C5D47F265FF3690BAD63E77AD03B3A710
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths