shodi | 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys

General

Target
2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys
Size 1.2MB
Sample260814-mkcjlshq21
SHA256 ec326c589b29dc2ebf52bc7bf73e5fbdde6d35ef1ea51b72f554ece0c08f0939
MD5 42e6394064f47c45436da08954b49302
SHA1 dee3dc49f955d3c48a7bcc2d4f546583d00403c7
SHA512 553c79470e1cbc48a78d5385d03b4fefe53f23e195b4e0b4c33790f45abf6eb10e7161cfbae7eb6f184dfabbbbc97576a72e473e778ec85eba532951c6f72a9d
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DTOYixUrHGQVL9vwf+SqwLa8Cck3DTi:xxal9vGhqF3DTexal9vGhqF3DTi
TLSH
T16D456A17F65910B8D4AAC178971B6537BA72BC1907317EEB1780AB213E76BE06B3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys

2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys

.exe 1.2MB

SHA256 ec326c589b29dc2ebf52bc7bf73e5fbdde6d35ef1ea51b72f554ece0c08f0939
MD5 42e6394064f47c45436da08954b49302
SHA1 dee3dc49f955d3c48a7bcc2d4f546583d00403c7
SHA512 553c79470e1cbc48a78d5385d03b4fefe53f23e195b4e0b4c33790f45abf6eb10e7161cfbae7eb6f184dfabbbbc97576a72e473e778ec85eba532951c6f72a9d
SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DTOYixUrHGQVL9vwf+SqwLa8Cck3DTi:xxal9vGhqF3DTexal9vGhqF3DTi
TLSH
T16D456A17F65910B8D4AAC178971B6537BA72BC1907317EEB1780AB213E76BE06B3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths