shodi | 2026-08-30_b1398d2b975464e1bfc56a3588024696_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

General

Target
2026-08-30_b1398d2b975464e1bfc56a3588024696_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys
Size 6.8MB
Sample260831-hcea1sfa39
SHA256 07e0b174fa50909e54c5a446a1b2f5a19b20a5cd0e64b3754772a7d1cd22bf6a
MD5 b1398d2b975464e1bfc56a3588024696
SHA1 7c42f922df6aeabe137c96bd366e4737a94acca5
SHA512 a3e07bb0f4ff484620d5f9b4ec8c4cf3a4f6187d15425cfda32851b895eec9f9f70fd48ceae25fee7a33db6889ab993cec82edd2e45d1d58e1b4389d209b121c
SSDEEP 98304:p+4LkB/qoHMdTnykB/qoHMdn0+4LkB/qoHMdTnykB/qoHMdnq:1vTqCvTqq
TLSH
T129667C21F9C6C33CE15580B5569CAFB6C40DFC26076414C76BE4BE23A9A17C71E36B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_b1398d2b975464e1bfc56a3588024696_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

2026-08-30_b1398d2b975464e1bfc56a3588024696_amadey_elex_icedid_luca-stealer_njrat_rhadamanthys

.exe 6.8MB

SHA256 07e0b174fa50909e54c5a446a1b2f5a19b20a5cd0e64b3754772a7d1cd22bf6a
MD5 b1398d2b975464e1bfc56a3588024696
SHA1 7c42f922df6aeabe137c96bd366e4737a94acca5
SHA512 a3e07bb0f4ff484620d5f9b4ec8c4cf3a4f6187d15425cfda32851b895eec9f9f70fd48ceae25fee7a33db6889ab993cec82edd2e45d1d58e1b4389d209b121c
SSDEEP 98304:p+4LkB/qoHMdTnykB/qoHMdn0+4LkB/qoHMdTnykB/qoHMdnq:1vTqCvTqq
TLSH
T129667C21F9C6C33CE15580B5569CAFB6C40DFC26076414C76BE4BE23A9A17C71E36B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths