shodi | 2026-08-10_b0c3b40eda27b1e745743866e19be930_akira_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys

General

Target
2026-08-10_b0c3b40eda27b1e745743866e19be930_akira_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys
Size 3.2MB
Sample260810-tmlcvsseqc
SHA256 796ab97529e610d2f7a7a22c0b2e292f5c0807a4603a15ddb82b799fc87cb311
MD5 b0c3b40eda27b1e745743866e19be930
SHA1 1da200b8b7f9bf6993c60ec5bb8025d980c501eb
SHA512 705d54a5ee2d0610b8c77927521965ae0ccbfd1e5d4a6047d64ae014735ca0c956de6a68140be5abead1ee390fd90750e0f8fae220b002a9ec4f0bd8b069fb8d
SSDEEP 49152:jxgGhqF7Mf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlF:aw/h4tZNh7XExcawL
TLSH
T1A3F59FA17258C866E416607E66753A95403CF8E6977108CFBFC03DA47636AD3F93A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_b0c3b40eda27b1e745743866e19be930_akira_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys

2026-08-10_b0c3b40eda27b1e745743866e19be930_akira_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys

.exe 3.2MB

SHA256 796ab97529e610d2f7a7a22c0b2e292f5c0807a4603a15ddb82b799fc87cb311
MD5 b0c3b40eda27b1e745743866e19be930
SHA1 1da200b8b7f9bf6993c60ec5bb8025d980c501eb
SHA512 705d54a5ee2d0610b8c77927521965ae0ccbfd1e5d4a6047d64ae014735ca0c956de6a68140be5abead1ee390fd90750e0f8fae220b002a9ec4f0bd8b069fb8d
SSDEEP 49152:jxgGhqF7Mf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlF:aw/h4tZNh7XExcawL
TLSH
T1A3F59FA17258C866E416607E66753A95403CF8E6977108CFBFC03DA47636AD3F93A323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths