shodi | 2026-08-10_b10328547c475b7bf996611353b7188c_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

General

Target
2026-08-10_b10328547c475b7bf996611353b7188c_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar
Size 8.8MB
Sample260810-lrn1jsfc69
SHA256 a54f8b22e4bf219a2f58bc74f2a748e48eef006240744df6fbcaa37ca4fe1def
MD5 b10328547c475b7bf996611353b7188c
SHA1 2871dd2b6556526989436944b537436ff3f70a82
SHA512 44183ff8b1ab715e80da72df11c4fe463078d294b28cadf9bbe4201d5d949ba72fe935eeeb3962c9a3bb1e4246b003d128a9832553aad23970970302901bd558
SSDEEP 98304:t+4LkGWQtZ/K0tGOFWVRuLftS+4LkGWQtZ/K0tGOFWVRuLftS:JBWyZ/K0ttYVA+BWyZ/K0ttYVAE
TLSH
T127967B13F58501ACD05EC079CF4A9632EB2678590BF175EF3A906AE22A77BD03B39711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_b10328547c475b7bf996611353b7188c_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

2026-08-10_b10328547c475b7bf996611353b7188c_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_vidar

.exe 8.8MB

SHA256 a54f8b22e4bf219a2f58bc74f2a748e48eef006240744df6fbcaa37ca4fe1def
MD5 b10328547c475b7bf996611353b7188c
SHA1 2871dd2b6556526989436944b537436ff3f70a82
SHA512 44183ff8b1ab715e80da72df11c4fe463078d294b28cadf9bbe4201d5d949ba72fe935eeeb3962c9a3bb1e4246b003d128a9832553aad23970970302901bd558
SSDEEP 98304:t+4LkGWQtZ/K0tGOFWVRuLftS+4LkGWQtZ/K0tGOFWVRuLftS:JBWyZ/K0ttYVA+BWyZ/K0ttYVAE
TLSH
T127967B13F58501ACD05EC079CF4A9632EB2678590BF175EF3A906AE22A77BD03B39711
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths