shodi | 2026-08-23_4b1850e0b8e5d9c4069fd1a2a2534845_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-23_4b1850e0b8e5d9c4069fd1a2a2534845_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys
Size 3.7MB
Sample260824-pllvsattcx
SHA256 75cd4ec71c18a72a527f56871d9cd31242805094ac6ec805eb47dafa3d7c4f09
MD5 4b1850e0b8e5d9c4069fd1a2a2534845
SHA1 c08232d40979e8957de188e35c7c999593431916
SHA512 05d8d3bed145865692ca63709ef052374890a572b7f5847cb1f987646478ecb26b7a70e386ee1935f6529387908f82d20f36a77ba492916865d08f7a365b1f37
SSDEEP 49152:PxgGhqFU2887eIqT48fo6bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuH0:OU2+48DbXsPN5kiQaZ5i
TLSH
T139068E22B784C076E46681B169B9DB7B9138FD240F6645CB63807B2E2D30BD36B35B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_4b1850e0b8e5d9c4069fd1a2a2534845_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

2026-08-23_4b1850e0b8e5d9c4069fd1a2a2534845_akira_amadey_cloudeye_elex_hijackloader_luca-stealer_njrat_rhadamanthys

.exe 3.7MB

SHA256 75cd4ec71c18a72a527f56871d9cd31242805094ac6ec805eb47dafa3d7c4f09
MD5 4b1850e0b8e5d9c4069fd1a2a2534845
SHA1 c08232d40979e8957de188e35c7c999593431916
SHA512 05d8d3bed145865692ca63709ef052374890a572b7f5847cb1f987646478ecb26b7a70e386ee1935f6529387908f82d20f36a77ba492916865d08f7a365b1f37
SSDEEP 49152:PxgGhqFU2887eIqT48fo6bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuH0:OU2+48DbXsPN5kiQaZ5i
TLSH
T139068E22B784C076E46681B169B9DB7B9138FD240F6645CB63807B2E2D30BD36B35B17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths