shodi | 2026-07-14_2cf50ecdfe5ccc2ad58796d5c70cd3b1_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader

General

Target
2026-07-14_2cf50ecdfe5ccc2ad58796d5c70cd3b1_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader
Size 1.7MB
Sample260715-bd91rabv3w
SHA256 205602b6853a5a74d01acf2579eda489fe50d61aa51dd23d2db0f31c20bcd8d0
MD5 2cf50ecdfe5ccc2ad58796d5c70cd3b1
SHA1 2e94b3e11e2dcb69b2e33f74b73fc9bc724ff177
SHA512 a6bd53a482cb1de30dbf923ef732c07cc0700879bd861c8a241da8a89bd00677ac70799b34ce8470cf9e2e0b5e06523f5f780ee92b2d3fdf079ddbc3b7ec70d9
SSDEEP 24576:FGTjSw8KK/KCtMZd0qgzGTjSw8KK/KCtMZd0qgv:FGT2KK/KCGZd0qgzGT2KK/KCGZd0qgv
TLSH
T14C85AF16F5C140F6D41AC430C66E9635AA36BC7D1BA069EB13C0E7989D33BD0AB38F56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_2cf50ecdfe5ccc2ad58796d5c70cd3b1_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader

2026-07-14_2cf50ecdfe5ccc2ad58796d5c70cd3b1_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader

.exe 1.7MB

SHA256 205602b6853a5a74d01acf2579eda489fe50d61aa51dd23d2db0f31c20bcd8d0
MD5 2cf50ecdfe5ccc2ad58796d5c70cd3b1
SHA1 2e94b3e11e2dcb69b2e33f74b73fc9bc724ff177
SHA512 a6bd53a482cb1de30dbf923ef732c07cc0700879bd861c8a241da8a89bd00677ac70799b34ce8470cf9e2e0b5e06523f5f780ee92b2d3fdf079ddbc3b7ec70d9
SSDEEP 24576:FGTjSw8KK/KCtMZd0qgzGTjSw8KK/KCtMZd0qgv:FGT2KK/KCGZd0qgzGT2KK/KCGZd0qgv
TLSH
T14C85AF16F5C140F6D41AC430C66E9635AA36BC7D1BA069EB13C0E7989D33BD0AB38F56
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths