shodi | 2026-08-29_fdd37c682efce19b9307b2fd642b571b_amadey_cloudeye_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-29_fdd37c682efce19b9307b2fd642b571b_amadey_cloudeye_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 4.3MB
Sample260830-2r96sa1gnc
SHA256 d73bccafbdfaeda62fd1cb74586a0fa7413eb7ab62221e53dade7adc70383f42
MD5 fdd37c682efce19b9307b2fd642b571b
SHA1 55c3394183f5bca9d2c44e961df9a219e548abf1
SHA512 b1d63f8da858571655c5d7c9888eaa54e46d18c0466de0630c40b575f7c825b852d4adc035beef5acef9a507d4a0ce0785cca425e5d477428f8eefd9492950e9
SSDEEP 98304:p+4LkB/qoHMdnJE7hAlKnsz2C2PYdhIqH7d6:1vJEul4szEkd6
TLSH
T1BE268D317CC6C639E25201B1559CAFB6C15DDC3A077204C7ABD0BE22AA613C76A35F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-29_fdd37c682efce19b9307b2fd642b571b_amadey_cloudeye_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-08-29_fdd37c682efce19b9307b2fd642b571b_amadey_cloudeye_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 4.3MB

SHA256 d73bccafbdfaeda62fd1cb74586a0fa7413eb7ab62221e53dade7adc70383f42
MD5 fdd37c682efce19b9307b2fd642b571b
SHA1 55c3394183f5bca9d2c44e961df9a219e548abf1
SHA512 b1d63f8da858571655c5d7c9888eaa54e46d18c0466de0630c40b575f7c825b852d4adc035beef5acef9a507d4a0ce0785cca425e5d477428f8eefd9492950e9
SSDEEP 98304:p+4LkB/qoHMdnJE7hAlKnsz2C2PYdhIqH7d6:1vJEul4szEkd6
TLSH
T1BE268D317CC6C639E25201B1559CAFB6C15DDC3A077204C7ABD0BE22AA613C76A35F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths