shodi | 2026-08-09_a03d534d177448fc2cf084cf31ce806f_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

General

Target
2026-08-09_a03d534d177448fc2cf084cf31ce806f_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar
Size 4.8MB
Sample260809-traf6at1et
SHA256 585af09c0cd3f7552e8d81bf4d41889b2295914559ec2daf001eb15f4c7ddaf9
MD5 a03d534d177448fc2cf084cf31ce806f
SHA1 fc7bd7c9a8fb4ab8824e99007c76efa4d359ae80
SHA512 44219d2d38a6cf073cdeb2e4ae6c998bf9545fde866675ab595882d875be912843110310b6d8d02d46b093fc954a49d70664c762af85cb5010b2a071211abcde
SSDEEP 98304:p+4LkB/qoHMdTnykB/qoHMdniO4q75Av7fbUhabgO:1vTqiO4q7+zUhasO
TLSH
T123366B38BDC5C378E06681B585A8AFF9D419BC221B140DCB26E06B175D677C32E35F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_a03d534d177448fc2cf084cf31ce806f_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

2026-08-09_a03d534d177448fc2cf084cf31ce806f_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

.exe 4.8MB

SHA256 585af09c0cd3f7552e8d81bf4d41889b2295914559ec2daf001eb15f4c7ddaf9
MD5 a03d534d177448fc2cf084cf31ce806f
SHA1 fc7bd7c9a8fb4ab8824e99007c76efa4d359ae80
SHA512 44219d2d38a6cf073cdeb2e4ae6c998bf9545fde866675ab595882d875be912843110310b6d8d02d46b093fc954a49d70664c762af85cb5010b2a071211abcde
SSDEEP 98304:p+4LkB/qoHMdTnykB/qoHMdniO4q75Av7fbUhabgO:1vTqiO4q7+zUhasO
TLSH
T123366B38BDC5C378E06681B585A8AFF9D419BC221B140DCB26E06B175D677C32E35F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths