shodi | 2026-08-10_539656a38feb354e7fd2706c39b31cbc_akira_amadey_elex_hijackloader_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-10_539656a38feb354e7fd2706c39b31cbc_akira_amadey_elex_hijackloader_luca-stealer_njrat_rhadamanthys
Size 1.0MB
Sample260810-mkj9fsfe52
SHA256 65ef2a37394a610090cc9de8e739a4dad9dee3b9612e859ad5d42f33b573b775
MD5 539656a38feb354e7fd2706c39b31cbc
SHA1 266ffd52a2923b9996763f9a506104911540ab9c
SHA512 34736d6d1aee4b0a87b11ea79e110fd457efe0cadf062ba8665edb46cacfc1dcb7e70b4dc884ddcc306e2a7643b90ffebd8041d372334c584ee216269e7cd210
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck39XYD282Ds/+E9UuFuUGx+zR5JeKsghPBOqwhq:xxal9vGhqF3KD28ss/pjk+hexgAjhq
TLSH
T17E357C03B6819FB8D06FC135961A9636AA7BBC144F309BDB13807E257E35BD06A38717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_539656a38feb354e7fd2706c39b31cbc_akira_amadey_elex_hijackloader_luca-stealer_njrat_rhadamanthys

2026-08-10_539656a38feb354e7fd2706c39b31cbc_akira_amadey_elex_hijackloader_luca-stealer_njrat_rhadamanthys

.exe 1.0MB

SHA256 65ef2a37394a610090cc9de8e739a4dad9dee3b9612e859ad5d42f33b573b775
MD5 539656a38feb354e7fd2706c39b31cbc
SHA1 266ffd52a2923b9996763f9a506104911540ab9c
SHA512 34736d6d1aee4b0a87b11ea79e110fd457efe0cadf062ba8665edb46cacfc1dcb7e70b4dc884ddcc306e2a7643b90ffebd8041d372334c584ee216269e7cd210
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck39XYD282Ds/+E9UuFuUGx+zR5JeKsghPBOqwhq:xxal9vGhqF3KD28ss/pjk+hexgAjhq
TLSH
T17E357C03B6819FB8D06FC135961A9636AA7BBC144F309BDB13807E257E35BD06A38717
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths