shodi | 2026-08-02_0ce1f2eff6f5d5a82190505d169ea184_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-08-02_0ce1f2eff6f5d5a82190505d169ea184_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 1.9MB
Sample260802-ydntva1arb
SHA256 331c89b6a89f2f93206388c75b39ca6e7774f02d1525ac5a0d1261733f4009c5
MD5 0ce1f2eff6f5d5a82190505d169ea184
SHA1 5d2336dbceba8658afd7e38ade6e18112cb14e2c
SHA512 1dbe44a3e85f83bbc34fa9c96fe7981e077a8e5e4f53c6e9b1d9f14a491b6e77d44ac33619b16d536a165ee36106c8babf14df578141daa3c9e71197f8b4c1e1
SSDEEP 24576:3gjlgjI45bl9Mbonwap41+zzPTThwv3EJh:3gjlgjI45TMwwapIgTR
TLSH
T14495F63671E2049AC68D9071DF56963597D23C7D8FF183F7B145B2C92B729C03A3AA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_0ce1f2eff6f5d5a82190505d169ea184_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-08-02_0ce1f2eff6f5d5a82190505d169ea184_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 1.9MB

SHA256 331c89b6a89f2f93206388c75b39ca6e7774f02d1525ac5a0d1261733f4009c5
MD5 0ce1f2eff6f5d5a82190505d169ea184
SHA1 5d2336dbceba8658afd7e38ade6e18112cb14e2c
SHA512 1dbe44a3e85f83bbc34fa9c96fe7981e077a8e5e4f53c6e9b1d9f14a491b6e77d44ac33619b16d536a165ee36106c8babf14df578141daa3c9e71197f8b4c1e1
SSDEEP 24576:3gjlgjI45bl9Mbonwap41+zzPTThwv3EJh:3gjlgjI45TMwwapIgTR
TLSH
T14495F63671E2049AC68D9071DF56963597D23C7D8FF183F7B145B2C92B729C03A3AA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths