shodi | 2026-07-17_e7238f00320cb8b9d8c2325f53356f23_akira_amadey_cobalt-strike_elex_hijackloader_rhadamanthys

General

Target
2026-07-17_e7238f00320cb8b9d8c2325f53356f23_akira_amadey_cobalt-strike_elex_hijackloader_rhadamanthys
Size 889KB
Sample260718-b28slab17j
SHA256 dab5d28ee9564ae007c72caadfa342f766e763d1476f14a43690a19e1ae0f996
MD5 e7238f00320cb8b9d8c2325f53356f23
SHA1 d723c535799bef2262a15d567349fcb1c803fd50
SHA512 29a880c4214b586b2cfe5b38228304961afd12a1c3ef23740c81462b94433beb1133b7252f878c126cae9f0d37dcd47405bbd8f0d6074a61e81a061f7df69163
SSDEEP 12288:sYixUrHGQVL9vwf+SqwLa8Cck39XYSNxNV+B2Ae6V1B+wYkS:Ixal9vGhqF3K2+IEV1BjLS
TLSH
T1F8157B53F69550F8D45AC138974AA936FA71B8590B30BAEF13805B322F76BE06B3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_e7238f00320cb8b9d8c2325f53356f23_akira_amadey_cobalt-strike_elex_hijackloader_rhadamanthys

2026-07-17_e7238f00320cb8b9d8c2325f53356f23_akira_amadey_cobalt-strike_elex_hijackloader_rhadamanthys

.exe 889KB

SHA256 dab5d28ee9564ae007c72caadfa342f766e763d1476f14a43690a19e1ae0f996
MD5 e7238f00320cb8b9d8c2325f53356f23
SHA1 d723c535799bef2262a15d567349fcb1c803fd50
SHA512 29a880c4214b586b2cfe5b38228304961afd12a1c3ef23740c81462b94433beb1133b7252f878c126cae9f0d37dcd47405bbd8f0d6074a61e81a061f7df69163
SSDEEP 12288:sYixUrHGQVL9vwf+SqwLa8Cck39XYSNxNV+B2Ae6V1B+wYkS:Ixal9vGhqF3K2+IEV1BjLS
TLSH
T1F8157B53F69550F8D45AC138974AA936FA71B8590B30BAEF13805B322F76BE06B3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths