shodi | 2026-07-02_3325c2779c21c2a7a06cef7ea4c23f6c_akira_amadey_darkgate_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-07-02_3325c2779c21c2a7a06cef7ea4c23f6c_akira_amadey_darkgate_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 2.8MB
Sample260702-qp5mqsfs21
SHA256 7412aa391dadf5876998676b7d2a1444504726f069103db552ebe65b7aa7fb86
MD5 3325c2779c21c2a7a06cef7ea4c23f6c
SHA1 968f7ef1cd459ac9525069c502054b4fa223f430
SHA512 cbcfe14cc70b5ed9badf728f172e9c5b8c79bb41edca29640836d6aadccfe5806fe303576cdc722b6241e13d0a85c388036353e8d066a1e4d3898cc50326ae54
SSDEEP 49152:BxgGhqFDFx9+CVD2SouuFOnYIsE53PbutmkO+wAOInO4XrztygxLHkJE4VBb:0xx9vuFOnYHE4s+wE9XD8VBb
TLSH
T15ED56B12B6E45639F1B76231AA7851619B7B7C615F3187CF13802E1E3D71AC0AE39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_3325c2779c21c2a7a06cef7ea4c23f6c_akira_amadey_darkgate_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-07-02_3325c2779c21c2a7a06cef7ea4c23f6c_akira_amadey_darkgate_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 2.8MB

SHA256 7412aa391dadf5876998676b7d2a1444504726f069103db552ebe65b7aa7fb86
MD5 3325c2779c21c2a7a06cef7ea4c23f6c
SHA1 968f7ef1cd459ac9525069c502054b4fa223f430
SHA512 cbcfe14cc70b5ed9badf728f172e9c5b8c79bb41edca29640836d6aadccfe5806fe303576cdc722b6241e13d0a85c388036353e8d066a1e4d3898cc50326ae54
SSDEEP 49152:BxgGhqFDFx9+CVD2SouuFOnYIsE53PbutmkO+wAOInO4XrztygxLHkJE4VBb:0xx9vuFOnYHE4s+wE9XD8VBb
TLSH
T15ED56B12B6E45639F1B76231AA7851619B7B7C615F3187CF13802E1E3D71AC0AE39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths