shodi | 2026-08-08_de148bc083019356a43302d643682369_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

General

Target
2026-08-08_de148bc083019356a43302d643682369_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader
Size 1.1MB
Sample260808-rfmagayalf
SHA256 8142480cd617bee5979147f012707952522f9ee602d1c3238cbf74b66283ce18
MD5 de148bc083019356a43302d643682369
SHA1 c65e29f08dc99bbf70940770bff4c01d83f5f0f1
SHA512 dba3d9cfed0a27aa581a2437c6cee34f35a504885f300110a2d26c53a84ab222f30d85947283390e6c5dd048874198f713ce7387d7e5eef524fee88a37a08621
SSDEEP 12288:/YiGTyUjD5xS8LjBTqKxHTq/zofXyc+MZd0qG5v9KbyEFeaj4P9/s6uD2m5LGWKY:TGTjSw8KE/KCtMZd0qgKWEfes6lm57
TLSH
T1AE359D17F58140FAD41EC079871AA632EA767CA91B7075DF0390EB552E33BE0A738B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_de148bc083019356a43302d643682369_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

2026-08-08_de148bc083019356a43302d643682369_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

.exe 1.1MB

SHA256 8142480cd617bee5979147f012707952522f9ee602d1c3238cbf74b66283ce18
MD5 de148bc083019356a43302d643682369
SHA1 c65e29f08dc99bbf70940770bff4c01d83f5f0f1
SHA512 dba3d9cfed0a27aa581a2437c6cee34f35a504885f300110a2d26c53a84ab222f30d85947283390e6c5dd048874198f713ce7387d7e5eef524fee88a37a08621
SSDEEP 12288:/YiGTyUjD5xS8LjBTqKxHTq/zofXyc+MZd0qG5v9KbyEFeaj4P9/s6uD2m5LGWKY:TGTjSw8KE/KCtMZd0qgKWEfes6lm57
TLSH
T1AE359D17F58140FAD41EC079871AA632EA767CA91B7075DF0390EB552E33BE0A738B16
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths