General

  • Target
    2026-06-30_accbd857c4c75a9a2f06b16f55a7105e_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader_wannacry
  • Size 1.6MB
  • Sample260701-dw63xsdv6j
  • SHA256 c70603bf148aae7e7b617306e734f0ec42de3a90d737f8a9fdba6ddfd718ed16
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-30_accbd857c4c75a9a2f06b16f55a7105e_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader_wannacry
    • Size 1.6MB
    • SHA256 c70603bf148aae7e7b617306e734f0ec42de3a90d737f8a9fdba6ddfd718ed16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Shodi worm

    • Family: Shodi

      Shodi is a Windows worm written in C++.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks