shodi | 2026-08-08_6cecbda98926dd776be71693b2c0554d_akira_cloudeye_elex_remcos_rhadamanthys

General

Target
2026-08-08_6cecbda98926dd776be71693b2c0554d_akira_cloudeye_elex_remcos_rhadamanthys
Size 4.1MB
Sample260808-wcdlda1hrg
SHA256 14a320501d90bd7f7c19708db95ef18a9fce42efe19f6150e12c1798f51d91e3
MD5 6cecbda98926dd776be71693b2c0554d
SHA1 f66d506bb7fd250169ec9ebaef968a8abb95b2dd
SHA512 659036e54e9166f2f18c422958da63d85bf1c0174747ea9fa58ba440601745e9b58fba50cfb47105bc5e02470487ac87fb7d343de5a51d117eaff415c0d1f45e
SSDEEP 49152:xxgGhqFTTQAK3ckwq/qoHMThK+xgGhqFTTQAK3ckwq/qoHMThKM:EP23ckB/qoHMdMP23ckB/qoHMdZ
TLSH
T11B167D21F6C2C378E55580B555EDAFB6D40CFC2A076414C3ABE4BE23A9513C31E3AB69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_6cecbda98926dd776be71693b2c0554d_akira_cloudeye_elex_remcos_rhadamanthys

2026-08-08_6cecbda98926dd776be71693b2c0554d_akira_cloudeye_elex_remcos_rhadamanthys

.exe 4.1MB

SHA256 14a320501d90bd7f7c19708db95ef18a9fce42efe19f6150e12c1798f51d91e3
MD5 6cecbda98926dd776be71693b2c0554d
SHA1 f66d506bb7fd250169ec9ebaef968a8abb95b2dd
SHA512 659036e54e9166f2f18c422958da63d85bf1c0174747ea9fa58ba440601745e9b58fba50cfb47105bc5e02470487ac87fb7d343de5a51d117eaff415c0d1f45e
SSDEEP 49152:xxgGhqFTTQAK3ckwq/qoHMThK+xgGhqFTTQAK3ckwq/qoHMThKM:EP23ckB/qoHMdMP23ckB/qoHMdZ
TLSH
T11B167D21F6C2C378E55580B555EDAFB6D40CFC2A076414C3ABE4BE23A9513C31E3AB69
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths