shodi | 2026-07-06_527f73fb7de60d0bf0864926fe26a1ee_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

General

Target
2026-07-06_527f73fb7de60d0bf0864926fe26a1ee_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar
Size 6.5MB
Sample260707-edy52ahs7w
SHA256 5549465233702053a4ae124f49e1bbe3a7548a202e8ee5203c89ee5761c1ed62
MD5 527f73fb7de60d0bf0864926fe26a1ee
SHA1 aa96bfc5b078fd5bfd620f04d79786caa18c34b6
SHA512 5bddb3702dc3c6d00600e8d90468fd48f2e59e41e581c2ca5d85b2f7eac7875ec6472e787c3c931eaa2c060697041d07f96df2e9c840825db0c4c53ad06f96e1
SSDEEP 98304:OP30oAaldmdi2UgXq9ouFkHP30oAaldmdi2UgXq9ouFko:GkKmdi2S9+vkKmdi2S9+o
TLSH
T138669C13B6E500B8E41AD179974AAA36E976F8090735B9EF07819A213F73FD1273E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_527f73fb7de60d0bf0864926fe26a1ee_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

2026-07-06_527f73fb7de60d0bf0864926fe26a1ee_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

.exe 6.5MB

SHA256 5549465233702053a4ae124f49e1bbe3a7548a202e8ee5203c89ee5761c1ed62
MD5 527f73fb7de60d0bf0864926fe26a1ee
SHA1 aa96bfc5b078fd5bfd620f04d79786caa18c34b6
SHA512 5bddb3702dc3c6d00600e8d90468fd48f2e59e41e581c2ca5d85b2f7eac7875ec6472e787c3c931eaa2c060697041d07f96df2e9c840825db0c4c53ad06f96e1
SSDEEP 98304:OP30oAaldmdi2UgXq9ouFkHP30oAaldmdi2UgXq9ouFko:GkKmdi2S9+vkKmdi2S9+o
TLSH
T138669C13B6E500B8E41AD179974AAA36E976F8090735B9EF07819A213F73FD1273E701
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths