shodi | 2026-07-30_4c5f04088c01e8819c6da2cc71302930_cloudeye_cobalt-strike_elex_rhadamanthys_smoke-loader_vidar

General

Target
2026-07-30_4c5f04088c01e8819c6da2cc71302930_cloudeye_cobalt-strike_elex_rhadamanthys_smoke-loader_vidar
Size 1.2MB
Sample260730-wccdbadb62
SHA256 99a833b34a3ecdc19e386d343a9bc34193a4192637e883991ea018b3bdebee0b
MD5 4c5f04088c01e8819c6da2cc71302930
SHA1 821c61617242b5fc5a50375ffcc3db9d02c2b901
SHA512 b6cbe31f315ccf51db415bcf5b9ee71a23176a6f9f35435a0141cea82c53f4c6dc994a44a6355246c5e4658ce0b734d768a8dee4a17231d56225132238fc2a19
SSDEEP 12288:TYiGTyUjD5xS8xKkhgjI45iKl98Pbw7nw/mMuhylcsd4a4p4++F+zzNXvDFT7cO6:PGTjS6gjI45bl9Mbonwap41+zzPTT6
TLSH
T11A45AE17B6D150F9E01AD074C74A5636EA72BC6A1B74A9EF0391E2942E33FE0273E705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_4c5f04088c01e8819c6da2cc71302930_cloudeye_cobalt-strike_elex_rhadamanthys_smoke-loader_vidar

2026-07-30_4c5f04088c01e8819c6da2cc71302930_cloudeye_cobalt-strike_elex_rhadamanthys_smoke-loader_vidar

.exe 1.2MB

SHA256 99a833b34a3ecdc19e386d343a9bc34193a4192637e883991ea018b3bdebee0b
MD5 4c5f04088c01e8819c6da2cc71302930
SHA1 821c61617242b5fc5a50375ffcc3db9d02c2b901
SHA512 b6cbe31f315ccf51db415bcf5b9ee71a23176a6f9f35435a0141cea82c53f4c6dc994a44a6355246c5e4658ce0b734d768a8dee4a17231d56225132238fc2a19
SSDEEP 12288:TYiGTyUjD5xS8xKkhgjI45iKl98Pbw7nw/mMuhylcsd4a4p4++F+zzNXvDFT7cO6:PGTjS6gjI45bl9Mbonwap41+zzPTT6
TLSH
T11A45AE17B6D150F9E01AD074C74A5636EA72BC6A1B74A9EF0391E2942E33FE0273E705
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths