shodi | 2026-08-03_3e7284e18fa919b4fdec2d11188790bc_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-03_3e7284e18fa919b4fdec2d11188790bc_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 1.5MB
Sample260804-djb21sfj5x
SHA256 f4dd1f5a3f567f298119d75ed33e3096994b6c0af833001c0923010b7e95cbdc
MD5 3e7284e18fa919b4fdec2d11188790bc
SHA1 ca95eb3da90a5109f890400f069e12717b93a6ba
SHA512 4a2a6b10540df07c475bdf4727d4a59786c8aa25a49fd4ae334a82a89fcfaba1e3565dca4c59a63f37815bc368d008c4d9d3b923a8df8d6d89a0ba7e9413601c
SSDEEP 24576:Bxal9fpjk+hexgXWTktfCF1G0fH8ZGdiiGLqo0:Bx5+4gWkwq/qo0
TLSH
T159757C21F9C6C73CE55A81B955DD9FF5940EBC250F2405C72BE47E23A9A03C21E36B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_3e7284e18fa919b4fdec2d11188790bc_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-08-03_3e7284e18fa919b4fdec2d11188790bc_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 1.5MB

SHA256 f4dd1f5a3f567f298119d75ed33e3096994b6c0af833001c0923010b7e95cbdc
MD5 3e7284e18fa919b4fdec2d11188790bc
SHA1 ca95eb3da90a5109f890400f069e12717b93a6ba
SHA512 4a2a6b10540df07c475bdf4727d4a59786c8aa25a49fd4ae334a82a89fcfaba1e3565dca4c59a63f37815bc368d008c4d9d3b923a8df8d6d89a0ba7e9413601c
SSDEEP 24576:Bxal9fpjk+hexgXWTktfCF1G0fH8ZGdiiGLqo0:Bx5+4gWkwq/qo0
TLSH
T159757C21F9C6C73CE55A81B955DD9FF5940EBC250F2405C72BE47E23A9A03C21E36B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths