shodi | 2026-08-09_5dac8421d172845d71da470d9f071e4c_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader_vidar

General

Target
2026-08-09_5dac8421d172845d71da470d9f071e4c_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader_vidar
Size 1.3MB
Sample260809-2cjqaazwgs
SHA256 4c658f4de450ff520626de682fe69eab48511713cf1ff5ea5f55effe0ff4c53e
MD5 5dac8421d172845d71da470d9f071e4c
SHA1 ae12e2968ed968a03add54a9de7e2d1268170c0e
SHA512 2143ca21bb9992ba3e78ae9d9885d46df00f7badca24d9da965549070c7bf425b72f84ee558b3665a31a1750f2d45fa587d4de6306e17ae48dfbc88fedba796b
SSDEEP 24576:TGTjSw8KE/KCtMZd0qgKWEfes6lm5jhwbLT5M:TGT2KE/KCGZd0qgNEf16lhLT5M
TLSH
T1CE657D16F5C050BAE42AD035C7569232FA32786A076062DF73C4976A2F73BD0A73B716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_5dac8421d172845d71da470d9f071e4c_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader_vidar

2026-08-09_5dac8421d172845d71da470d9f071e4c_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader_vidar

.exe 1.3MB

SHA256 4c658f4de450ff520626de682fe69eab48511713cf1ff5ea5f55effe0ff4c53e
MD5 5dac8421d172845d71da470d9f071e4c
SHA1 ae12e2968ed968a03add54a9de7e2d1268170c0e
SHA512 2143ca21bb9992ba3e78ae9d9885d46df00f7badca24d9da965549070c7bf425b72f84ee558b3665a31a1750f2d45fa587d4de6306e17ae48dfbc88fedba796b
SSDEEP 24576:TGTjSw8KE/KCtMZd0qgKWEfes6lm5jhwbLT5M:TGT2KE/KCGZd0qgNEf16lhLT5M
TLSH
T1CE657D16F5C050BAE42AD035C7569232FA32786A076062DF73C4976A2F73BD0A73B716
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths