shodi | 2026-10-25_9688b5e2083969a597a2bed5e3989f79_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-10-25_9688b5e2083969a597a2bed5e3989f79_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 2.2MB
Sample261026-xxqbcagy6k
SHA256 f730f4d653ef4c7411c3dc01de8a8ec484769a9baaf56f6b2598620d6b8f23d3
MD5 9688b5e2083969a597a2bed5e3989f79
SHA1 08ed65f2e2a778d4904b818ee74c806af5153e6a
SHA512 7347622b81096aee546eccb9050ed0e83fee01bbf84846b661963366226805a6060c1d81d2f6d995e44319167c6adec8371182cf2878d30cc18755931e309285
SSDEEP 49152:IxgGhqFDRaYSDA+ouZ/K0tDmNhJXLkZRJ+0Y8TCz:vDRUZ/K0tKNhJXKsdz
TLSH
T163A57C17F68901E8D06AC178874AA532EA72BC550F34BADF1790B7252E77AE06F3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_9688b5e2083969a597a2bed5e3989f79_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-10-25_9688b5e2083969a597a2bed5e3989f79_akira_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 2.2MB

SHA256 f730f4d653ef4c7411c3dc01de8a8ec484769a9baaf56f6b2598620d6b8f23d3
MD5 9688b5e2083969a597a2bed5e3989f79
SHA1 08ed65f2e2a778d4904b818ee74c806af5153e6a
SHA512 7347622b81096aee546eccb9050ed0e83fee01bbf84846b661963366226805a6060c1d81d2f6d995e44319167c6adec8371182cf2878d30cc18755931e309285
SSDEEP 49152:IxgGhqFDRaYSDA+ouZ/K0tDmNhJXLkZRJ+0Y8TCz:vDRUZ/K0tKNhJXKsdz
TLSH
T163A57C17F68901E8D06AC178874AA532EA72BC550F34BADF1790B7252E77AE06F3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths