shodi | 2026-07-02_a31acb91b08e546d33485aa20e580f4c_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

General

Target
2026-07-02_a31acb91b08e546d33485aa20e580f4c_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys
Size 1.0MB
Sample260702-p8nb5aex4y
SHA256 3356baa37bb84ed20c95a870f315df2373a6035bdcb8a2b39b771c8bd0b4297f
MD5 a31acb91b08e546d33485aa20e580f4c
SHA1 5d64b95f53cee90b1d30d9834343308964a4c94a
SHA512 587cb0aef843915fdfd45f3e055e5dcf4dd9668a6283e6addc7f80bf20b860b41e8eacbb417be6a25ef7ba5b27094460da819d022b08eaf730c28564c195b9ca
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DTGTyUjD5xo+E9UuFuUGx+zR5JeKsghPBOqwhM:xxal9vGhqF3DTGTjopjk+hexgAjhM
TLSH
T169357C03B6849B79D46FC135861A9636AA7BBC144F309BDB13807F297E31BD06A39713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_a31acb91b08e546d33485aa20e580f4c_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

2026-07-02_a31acb91b08e546d33485aa20e580f4c_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

.exe 1.0MB

SHA256 3356baa37bb84ed20c95a870f315df2373a6035bdcb8a2b39b771c8bd0b4297f
MD5 a31acb91b08e546d33485aa20e580f4c
SHA1 5d64b95f53cee90b1d30d9834343308964a4c94a
SHA512 587cb0aef843915fdfd45f3e055e5dcf4dd9668a6283e6addc7f80bf20b860b41e8eacbb417be6a25ef7ba5b27094460da819d022b08eaf730c28564c195b9ca
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DTGTyUjD5xo+E9UuFuUGx+zR5JeKsghPBOqwhM:xxal9vGhqF3DTGTjopjk+hexgAjhM
TLSH
T169357C03B6849B79D46FC135861A9636AA7BBC144F309BDB13807F297E31BD06A39713
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths