shodi | 2026-08-09_ea11f3ca200ad89c9a811adcbb7dd7bc_amadey_cloudeye_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-09_ea11f3ca200ad89c9a811adcbb7dd7bc_amadey_cloudeye_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys
Size 1.7MB
Sample260809-wplgrawvct
SHA256 b42283e1960e2f4f66374e0125890b1a875ec357c061eb21c20ba29df3afe633
MD5 ea11f3ca200ad89c9a811adcbb7dd7bc
SHA1 8a2bea3e63644cd9534577c834bdacabcd8cf02e
SHA512 8b0100851e6af351d9ebc8f442053971d63e49f081d19d93a57fdb11f6de533dddb1d2f7c1f682b462e248b939fd3dbb61be12473e7ec48a530c5ac88c934ee2
SSDEEP 24576:xGTrKP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqiax:xGTrKKe1YeEAYOW1+M5A83M+svqiax
TLSH
T1AD85181177E95A29F1F72B31AEB851605A7BBC615F31C6CF13802A5E2970BC09936B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_ea11f3ca200ad89c9a811adcbb7dd7bc_amadey_cloudeye_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys

2026-08-09_ea11f3ca200ad89c9a811adcbb7dd7bc_amadey_cloudeye_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys

.exe 1.7MB

SHA256 b42283e1960e2f4f66374e0125890b1a875ec357c061eb21c20ba29df3afe633
MD5 ea11f3ca200ad89c9a811adcbb7dd7bc
SHA1 8a2bea3e63644cd9534577c834bdacabcd8cf02e
SHA512 8b0100851e6af351d9ebc8f442053971d63e49f081d19d93a57fdb11f6de533dddb1d2f7c1f682b462e248b939fd3dbb61be12473e7ec48a530c5ac88c934ee2
SSDEEP 24576:xGTrKP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqiax:xGTrKKe1YeEAYOW1+M5A83M+svqiax
TLSH
T1AD85181177E95A29F1F72B31AEB851605A7BBC615F31C6CF13802A5E2970BC09936B33
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths