Resubmissions

10/08/2026, 17:12

260810-vqvalsywhv10

10/08/2026, 13:50

260810-q5b1csan3t10

General

  • Target
    2026-08-10_5fd7f0c8a8a697093a1ee3b85d3bd9f8_elex_nymaim_rhadamanthys_smoke-loader_stealc_tofsee
  • Size 512KB
  • Sample260810-q5b1csan3t
  • SHA256 b613a768d6cae6e1accc8f4bf1c261f2bb1dd3ec3418142142e07fc75f4af489
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-10_5fd7f0c8a8a697093a1ee3b85d3bd9f8_elex_nymaim_rhadamanthys_smoke-loader_stealc_tofsee
    • Size 512KB
    • SHA256 b613a768d6cae6e1accc8f4bf1c261f2bb1dd3ec3418142142e07fc75f4af489
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Shodi worm

    • Family: Shodi

      Shodi is a Windows worm written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks