shodi | 2026-08-02_fc2571c94907a9863805d5ff5c352bbe_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

General

Target
2026-08-02_fc2571c94907a9863805d5ff5c352bbe_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar
Size 2.4MB
Sample260802-tht47scd26
SHA256 d963ac643c68dc231fba16718b76c0aa705375e82ab50f60099f6d04a65a259a
MD5 fc2571c94907a9863805d5ff5c352bbe
SHA1 50168c9e142e47e54eca40eff4d19fafe752ac90
SHA512 56ad226f0148a6945c6125327a40b2153c5355414d10630a862f072215c6d1aa9a072b5f53d9828a78e25d90d988eb2d0cbed85c584582824b886a7007e381a8
SSDEEP 49152:CwxgGhqFTTVgjI45TMwwapIgTWbutmkO+wAOInO4XrztygxLHkJE4VB+:CnPzLapIEs+wE9XD8VB+
TLSH
T16AC59E13F29114B9D29AC130CE1AA532FB65786D07F269FB37909A553E37AE03B39701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_fc2571c94907a9863805d5ff5c352bbe_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

2026-08-02_fc2571c94907a9863805d5ff5c352bbe_akira_cloudeye_cobalt-strike_elex_rhadamanthys_vidar

.exe 2.4MB

SHA256 d963ac643c68dc231fba16718b76c0aa705375e82ab50f60099f6d04a65a259a
MD5 fc2571c94907a9863805d5ff5c352bbe
SHA1 50168c9e142e47e54eca40eff4d19fafe752ac90
SHA512 56ad226f0148a6945c6125327a40b2153c5355414d10630a862f072215c6d1aa9a072b5f53d9828a78e25d90d988eb2d0cbed85c584582824b886a7007e381a8
SSDEEP 49152:CwxgGhqFTTVgjI45TMwwapIgTWbutmkO+wAOInO4XrztygxLHkJE4VB+:CnPzLapIEs+wE9XD8VB+
TLSH
T16AC59E13F29114B9D29AC130CE1AA532FB65786D07F269FB37909A553E37AE03B39701
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths