shodi | 2026-08-07_c2f26d74464ca7130f33f3ef964e6c23_akira_cloudeye_elex_luca-stealer_njrat_remcos_rhadamanthys

General

Target
2026-08-07_c2f26d74464ca7130f33f3ef964e6c23_akira_cloudeye_elex_luca-stealer_njrat_remcos_rhadamanthys
Size 5.5MB
Sample260808-a18krswfpb
SHA256 50b213ca00cb5fd2b4b31ac1c71a5daae77084c319081b184853125ae73304d6
MD5 c2f26d74464ca7130f33f3ef964e6c23
SHA1 eeb323c3ca964637611dd8cd4ad8e26d7dad8c86
SHA512 24a02a3457d70ba00a9930d874893656ea8ffa34d2c847d82a7be41e06f80a2a7a9edd407d3249c86c98efea74d7d9d0139377ba5de4f170f63aee962b4587a7
SSDEEP 98304:vP0l/h4tZNh7XExcawXP0l/h4tZNh7XExcaws:H0l/h4tFZ0l/h4tFa
TLSH
T1F7469E91754CC866E516907BA67438598038B4E7E3B11CCBFFC03D20666AED3A93E367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_c2f26d74464ca7130f33f3ef964e6c23_akira_cloudeye_elex_luca-stealer_njrat_remcos_rhadamanthys

2026-08-07_c2f26d74464ca7130f33f3ef964e6c23_akira_cloudeye_elex_luca-stealer_njrat_remcos_rhadamanthys

.exe 5.5MB

SHA256 50b213ca00cb5fd2b4b31ac1c71a5daae77084c319081b184853125ae73304d6
MD5 c2f26d74464ca7130f33f3ef964e6c23
SHA1 eeb323c3ca964637611dd8cd4ad8e26d7dad8c86
SHA512 24a02a3457d70ba00a9930d874893656ea8ffa34d2c847d82a7be41e06f80a2a7a9edd407d3249c86c98efea74d7d9d0139377ba5de4f170f63aee962b4587a7
SSDEEP 98304:vP0l/h4tZNh7XExcawXP0l/h4tZNh7XExcaws:H0l/h4tFZ0l/h4tFa
TLSH
T1F7469E91754CC866E516907BA67438598038B4E7E3B11CCBFFC03D20666AED3A93E367
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths