shodi | 2026-08-05_2fd54e57d7f6d83f92a2eb39c3d51dac_akira_cloudeye_elex_remcos_rhadamanthys

General

Target
2026-08-05_2fd54e57d7f6d83f92a2eb39c3d51dac_akira_cloudeye_elex_remcos_rhadamanthys
Size 3.6MB
Sample260805-1c6dlssta1
SHA256 4b2c42114ca03fd26cd461f6172eae39c1c1388a1307d9475d67b24f1936e330
MD5 2fd54e57d7f6d83f92a2eb39c3d51dac
SHA1 d3ed95f759102d44dbdf8d5e5452b177b8638c64
SHA512 36cf82e1c340feb517d30b569b2762c6b14aed814b9d9a839ceb964c33e0d6667e8bfae7ab6b1ad40913a37a8106702db58715e7e36c7d0c502b2f7fd51cebd3
SSDEEP 49152:CwxgGhqFTTQAK3ckwq/qo7wxgGhqFTTQAK3ckwq/qou:CnP23ckB/qo7nP23ckB/qou
TLSH
T1BB067C22F6C3837CE45580B556EDAFB6D40CBC2A076454C39BE4BD236D623C21E3A759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_2fd54e57d7f6d83f92a2eb39c3d51dac_akira_cloudeye_elex_remcos_rhadamanthys

2026-08-05_2fd54e57d7f6d83f92a2eb39c3d51dac_akira_cloudeye_elex_remcos_rhadamanthys

.exe 3.6MB

SHA256 4b2c42114ca03fd26cd461f6172eae39c1c1388a1307d9475d67b24f1936e330
MD5 2fd54e57d7f6d83f92a2eb39c3d51dac
SHA1 d3ed95f759102d44dbdf8d5e5452b177b8638c64
SHA512 36cf82e1c340feb517d30b569b2762c6b14aed814b9d9a839ceb964c33e0d6667e8bfae7ab6b1ad40913a37a8106702db58715e7e36c7d0c502b2f7fd51cebd3
SSDEEP 49152:CwxgGhqFTTQAK3ckwq/qo7wxgGhqFTTQAK3ckwq/qou:CnP23ckB/qo7nP23ckB/qou
TLSH
T1BB067C22F6C3837CE45580B556EDAFB6D40CBC2A076454C39BE4BD236D623C21E3A759
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths