shodi | 2026-08-19_5636f5e2a2f2b62ee0d1c33acc5b28a5_amadey_elex_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee

General

Target
2026-08-19_5636f5e2a2f2b62ee0d1c33acc5b28a5_amadey_elex_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee
Size 3.9MB
Sample260819-ydbjhsvsav
SHA256 95e29a0ea545d21169e5546b855cd0dab95a8125f5d24892925247d6aeb81625
MD5 5636f5e2a2f2b62ee0d1c33acc5b28a5
SHA1 b0e74ae1d0630d04f9cd4b55f5dbdf8a55e4d4ac
SHA512 ef5ba2daf1b01bd8251b95232a1d713a4e4b47ec9cfdc97bd337a619af1a7b92db36c21f1e4b8a265d5bed0fd4b3d75f82b2d671e38f23279ea31f9aa4f0d2a4
SSDEEP 98304:PT2UgXq9ouFkULGyqobNq12kB/qoHMdnJE7hh:b2S9+ULdNBJEf
TLSH
T1E5168D31FBC5C135E51A11B3586CAFB6C45DF93913284AC367D46D26EA902C32E33B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_5636f5e2a2f2b62ee0d1c33acc5b28a5_amadey_elex_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee

2026-08-19_5636f5e2a2f2b62ee0d1c33acc5b28a5_amadey_elex_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_stealc_tofsee

.exe 3.9MB

IMPHASH 77f13bc24efea5a05601b43cf44d1f1a
SHA256 95e29a0ea545d21169e5546b855cd0dab95a8125f5d24892925247d6aeb81625
MD5 5636f5e2a2f2b62ee0d1c33acc5b28a5
SHA1 b0e74ae1d0630d04f9cd4b55f5dbdf8a55e4d4ac
SHA512 ef5ba2daf1b01bd8251b95232a1d713a4e4b47ec9cfdc97bd337a619af1a7b92db36c21f1e4b8a265d5bed0fd4b3d75f82b2d671e38f23279ea31f9aa4f0d2a4
SSDEEP 98304:PT2UgXq9ouFkULGyqobNq12kB/qoHMdnJE7hh:b2S9+ULdNBJEf
TLSH
T1E5168D31FBC5C135E51A11B3586CAFB6C45DF93913284AC367D46D26EA902C32E33B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths