shodi | 2026-08-09_4726725b7a9ae628dcf3ccba1703b4cc_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

General

Target
2026-08-09_4726725b7a9ae628dcf3ccba1703b4cc_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader
Size 1.1MB
Sample260809-2datrswglf
SHA256 cba0ce8326ba2c878462f43ac85ed40c5284006f12c7d346c1da0033a8f63c6a
MD5 4726725b7a9ae628dcf3ccba1703b4cc
SHA1 8ab9de3e927cdccbf05bb28023442daf00d37956
SHA512 0ac030c170df4cde0285cc2f2a83d525efe30ed17268ff6364215687935f6ef0558e91ced6e56898c5d18b64ad23b3ae63ba9e8a872b724e1b076a9735431d37
SSDEEP 12288:iYiGTyUjD5xS8LjBTqKxHTq/zofXyc+MZd0qG5v9KbyEFeaj4P9/s6uD2m5LGWKd:6GTjSw8KE/KCtMZd0qgKWEfes6lm54LX
TLSH
T1E2459E17F58140F9D41EC079872AA632EA767CA9077075DF0790EB552E33BE0AB38B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_4726725b7a9ae628dcf3ccba1703b4cc_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

2026-08-09_4726725b7a9ae628dcf3ccba1703b4cc_amadey_cloudeye_elex_hellokitty_rhadamanthys_smoke-loader

.exe 1.1MB

SHA256 cba0ce8326ba2c878462f43ac85ed40c5284006f12c7d346c1da0033a8f63c6a
MD5 4726725b7a9ae628dcf3ccba1703b4cc
SHA1 8ab9de3e927cdccbf05bb28023442daf00d37956
SHA512 0ac030c170df4cde0285cc2f2a83d525efe30ed17268ff6364215687935f6ef0558e91ced6e56898c5d18b64ad23b3ae63ba9e8a872b724e1b076a9735431d37
SSDEEP 12288:iYiGTyUjD5xS8LjBTqKxHTq/zofXyc+MZd0qG5v9KbyEFeaj4P9/s6uD2m5LGWKd:6GTjSw8KE/KCtMZd0qgKWEfes6lm54LX
TLSH
T1E2459E17F58140F9D41EC079872AA632EA767CA9077075DF0790EB552E33BE0AB38B16
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths