shodi | 2026-08-08_36119eafd2abe440f7ad6aa16fe166f3_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-08_36119eafd2abe440f7ad6aa16fe166f3_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 1.3MB
Sample260808-tswqsazgre
SHA256 6fae2ba98f0c6f189b948576197516e10df74c3f717f8afe0a8fafa310fa34bb
MD5 36119eafd2abe440f7ad6aa16fe166f3
SHA1 9f1be75c5e307b790e9ebd039f96c04d432876c5
SHA512 12ecf9654b59033cc36d76d471b69eae6df1dc42d1fe605a4cbbf5f9bf778de8f973cae27420a835c81b30a18c5bf59300c985dd790da7706fb39c18958f4bde
SSDEEP 12288:sYixUrHGQVL9f+E9UuFuUGx+zR5JeKsghPBC60jr2Ybtre5MAGRNWYbuT71GBnoo:Ixal9fpjk+hexgXWTktfCF1G2
TLSH
T11F556C22F582877CE15A81B956DD9FF5941EBC250F3405C72BE47E23A9B03C11E3AB26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_36119eafd2abe440f7ad6aa16fe166f3_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-08-08_36119eafd2abe440f7ad6aa16fe166f3_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 1.3MB

SHA256 6fae2ba98f0c6f189b948576197516e10df74c3f717f8afe0a8fafa310fa34bb
MD5 36119eafd2abe440f7ad6aa16fe166f3
SHA1 9f1be75c5e307b790e9ebd039f96c04d432876c5
SHA512 12ecf9654b59033cc36d76d471b69eae6df1dc42d1fe605a4cbbf5f9bf778de8f973cae27420a835c81b30a18c5bf59300c985dd790da7706fb39c18958f4bde
SSDEEP 12288:sYixUrHGQVL9f+E9UuFuUGx+zR5JeKsghPBC60jr2Ybtre5MAGRNWYbuT71GBnoo:Ixal9fpjk+hexgXWTktfCF1G2
TLSH
T11F556C22F582877CE15A81B956DD9FF5941EBC250F3405C72BE47E23A9B03C11E3AB26
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths