shodi | 2026-11-10_eac5fb464e16b40825f1fc5de9f219f8_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_vidar

General

Target
2026-11-10_eac5fb464e16b40825f1fc5de9f219f8_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_vidar
Size 8.9MB
Sample261111-txs6fsae77
SHA256 686df81c9a75c9599841a8c2233c1fe6aa1233991f3a843be16bab886e5ae185
MD5 eac5fb464e16b40825f1fc5de9f219f8
SHA1 9edfde2da02f54073484188f0e9e54b41b397515
SHA512 028e27f3932941887b44d44ebe262a94bb5860755db7f156a5a0d4a86f319b3f045169f78661c2aa90e6d96f49211e19aa9b9df538eb7c1adf66425987e8f91d
SSDEEP 196608:Nllhll0ll0ll0ll0ll5ll5ll0ll0llell0ll:N9IIIIllIISI
TLSH
T10D968E2AA2E841F5D4B7C175CA529906FBB2780A07359BEF03E04A561F236F09F3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm shodi

Detects Shodi worm 1 IoCs

resource	yara_rule
sample	family_shodi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-10_eac5fb464e16b40825f1fc5de9f219f8_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_vidar

2026-11-10_eac5fb464e16b40825f1fc5de9f219f8_cobalt-strike_elex_icedid_njrat_nymaim_rhadamanthys_vidar

.exe 8.9MB

IMPHASH 77f13bc24efea5a05601b43cf44d1f1a
SHA256 686df81c9a75c9599841a8c2233c1fe6aa1233991f3a843be16bab886e5ae185
MD5 eac5fb464e16b40825f1fc5de9f219f8
SHA1 9edfde2da02f54073484188f0e9e54b41b397515
SHA512 028e27f3932941887b44d44ebe262a94bb5860755db7f156a5a0d4a86f319b3f045169f78661c2aa90e6d96f49211e19aa9b9df538eb7c1adf66425987e8f91d
SSDEEP 196608:Nllhll0ll0ll0ll0ll5ll5ll0ll0llell0ll:N9IIIIllIISI
TLSH
T10D968E2AA2E841F5D4B7C175CA529906FBB2780A07359BEF03E04A561F236F09F3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths