shodi | 2026-08-13_8c72011b1df130b51e0e656856a75784_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-08-13_8c72011b1df130b51e0e656856a75784_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 5.3MB
Sample260813-kst3hsvsf1
SHA256 27506ed5cab84ad24bcaf4b62fe2aa00a75241b29a08444b4bb59ffed89bdd66
MD5 8c72011b1df130b51e0e656856a75784
SHA1 b9c02e7c85dcc0ddbfe5d1d7293d7fd2b48987e8
SHA512 a9cb4a681768a5b1edefb5a057eeac9c4f3291a888244db79c49f925befb1e1bee5627453a30e0dc04d9b5f62395d8f3bd2dabcb982eb960c80b393f77da82d8
SSDEEP 49152:BxgGhqFsbutmkO+wAOIB/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSqO:0ps+wFWQtZ/K0tGOFWVRuLftCTa
TLSH
T142467C13F2E940E9E0AAD278DF359631AB727C594BF165DF224036D02E76AD07B38721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_8c72011b1df130b51e0e656856a75784_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-08-13_8c72011b1df130b51e0e656856a75784_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 5.3MB

SHA256 27506ed5cab84ad24bcaf4b62fe2aa00a75241b29a08444b4bb59ffed89bdd66
MD5 8c72011b1df130b51e0e656856a75784
SHA1 b9c02e7c85dcc0ddbfe5d1d7293d7fd2b48987e8
SHA512 a9cb4a681768a5b1edefb5a057eeac9c4f3291a888244db79c49f925befb1e1bee5627453a30e0dc04d9b5f62395d8f3bd2dabcb982eb960c80b393f77da82d8
SSDEEP 49152:BxgGhqFsbutmkO+wAOIB/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSqO:0ps+wFWQtZ/K0tGOFWVRuLftCTa
TLSH
T142467C13F2E940E9E0AAD278DF359631AB727C594BF165DF224036D02E76AD07B38721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths