shodi | 2026-07-22_293230b02aca5d6a2c9c51f73c8edf1f_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

General

Target
2026-07-22_293230b02aca5d6a2c9c51f73c8edf1f_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar
Size 3.4MB
Sample260722-wpbbsa1dnd
SHA256 4a38921f5ce639a03f61e6be4a2b487158d0d6e956b1e91503d50d37b056f72b
MD5 293230b02aca5d6a2c9c51f73c8edf1f
SHA1 e0fb3fce03f90a97a228f3d9468e34291f97d87b
SHA512 b41a9861510b9934fc5665504dc11b737da088f7d3321728fe0614b753862b4d14bca3bcde3e42d1a1c0cf7a49f0a3acd0b988f0c23220a21befd105efc826aa
SSDEEP 49152:PxgGhqFTTg/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKZ:OPPWQtZ/K0tGOFWVRuLfth
TLSH
T190F57B13F59910EDD05ED179974AA232EA72788A0731B5DF0790AB622E37FE06B3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_293230b02aca5d6a2c9c51f73c8edf1f_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

2026-07-22_293230b02aca5d6a2c9c51f73c8edf1f_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

.exe 3.4MB

SHA256 4a38921f5ce639a03f61e6be4a2b487158d0d6e956b1e91503d50d37b056f72b
MD5 293230b02aca5d6a2c9c51f73c8edf1f
SHA1 e0fb3fce03f90a97a228f3d9468e34291f97d87b
SHA512 b41a9861510b9934fc5665504dc11b737da088f7d3321728fe0614b753862b4d14bca3bcde3e42d1a1c0cf7a49f0a3acd0b988f0c23220a21befd105efc826aa
SSDEEP 49152:PxgGhqFTTg/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKZ:OPPWQtZ/K0tGOFWVRuLfth
TLSH
T190F57B13F59910EDD05ED179974AA232EA72788A0731B5DF0790AB622E37FE06B3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths