shodi | 2026-08-02_cbd7993414c73b5cdf35a1dcbc3ec9a5_akira_amadey_cloudeye_cobalt-strike_elex_luca-stealer_njrat_rhadamanthys_vidar

General

Target
2026-08-02_cbd7993414c73b5cdf35a1dcbc3ec9a5_akira_amadey_cloudeye_cobalt-strike_elex_luca-stealer_njrat_rhadamanthys_vidar
Size 8.8MB
Sample260802-vbvb3aszdt
SHA256 1742f114bb7c6920cc61ba66d98e8290df7e8f0b927d6ec9a53769a535852c01
MD5 cbd7993414c73b5cdf35a1dcbc3ec9a5
SHA1 ac3ec665aca850b32339911c8cee95fdf59b6210
SHA512 4fdc3e87d73a6dc73fb10f812c6c53759ea2319668f9918c09d7f3444bb086e29f1b163138ae5edc803fc6f36b3bc9eebc349b9f6adee27efc0fc1b2c9e64b34
SSDEEP 196608:cQDXl2S9+ULdNPtbuPZtQDXl2S9+ULdNPtbuPZw:cmV2SlLdNPt6RtmV2SlLdNPt6Rw
TLSH
T10D96CF23FB90407AD41F927389299636E5B2F82427389FDB13849A19FF656C37F36241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_cbd7993414c73b5cdf35a1dcbc3ec9a5_akira_amadey_cloudeye_cobalt-strike_elex_luca-stealer_njrat_rhadamanthys_vidar

2026-08-02_cbd7993414c73b5cdf35a1dcbc3ec9a5_akira_amadey_cloudeye_cobalt-strike_elex_luca-stealer_njrat_rhadamanthys_vidar

.exe 8.8MB

SHA256 1742f114bb7c6920cc61ba66d98e8290df7e8f0b927d6ec9a53769a535852c01
MD5 cbd7993414c73b5cdf35a1dcbc3ec9a5
SHA1 ac3ec665aca850b32339911c8cee95fdf59b6210
SHA512 4fdc3e87d73a6dc73fb10f812c6c53759ea2319668f9918c09d7f3444bb086e29f1b163138ae5edc803fc6f36b3bc9eebc349b9f6adee27efc0fc1b2c9e64b34
SSDEEP 196608:cQDXl2S9+ULdNPtbuPZtQDXl2S9+ULdNPtbuPZw:cmV2SlLdNPt6RtmV2SlLdNPt6Rw
TLSH
T10D96CF23FB90407AD41F927389299636E5B2F82427389FDB13849A19FF656C37F36241
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths