← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Shanya: The Silent Engine Behind Modern Stealth Attacks
WHITE CODERED_VTA 2025-12-09 Modified: 2025-12-09
37
IOCs
MEDIUM VOLUME
The full text of Shanya EDR killer post, compiled by Sophieos.com, on 1 December 2016, as part of a series of articles on the security threat posed by the Russian state.
edr killerdll versionearlyseendownload serverindicatortypedataindicatorsshanya edrshanyafigureopenssophosheartcryptstealcdll nameakiraaprilcryptautoruntelegrambumblebeecopyaugustqilincrytoxscreenbluesky
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Akira
Indicators of Compromise (8 / 37 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 17e13b559e8130e43dcbda8e26ec6351 MD5 of 2647c28b0967b7923d7c857fa1bdc7687d8f816f9dc4906c6a6f66f687a6419a 2025-12-09
FileHash-MD5 247890c8e1787f3836a9085244b70e83 MD5 of 6645297a0a423564f99b9f474b0df234d6613d04df48a94cb67f541b8eb829d1 2025-12-09
FileHash-MD5 291aa9f17d170ee9ca027c16d4acfaf9 MD5 of 65de909d70e361d611d00a944ea094c385467777ffc053c96aafa04c795fdc90 2025-12-09
FileHash-MD5 29236d33201697a40042b3325414c593 MD5 of 59906b022adfc6f63903adbdbb64c82881e0b1664d6b7f7ee42319019fcb3d7e 2025-12-09
FileHash-MD5 34fe39190f861681e61a46fe8162d3bc MD5 of 087216ee05746cc264752b0623dc6a1e32cddc0ca088832672e6dd356d394393 2025-12-09
FileHash-MD5 3fd73115a166157e731e8b538155ab4f MD5 of 5b7b280b53ff3cf95ead4fd4a435cd28294c5fce6a924ec52e500a109deb868b 2025-12-09
FileHash-MD5 54de95cc33834a2f877ba4842860af27 MD5 of 95a6f6e79c1842cea3603df3209fddc12aeb4fc77d1c58a852f877b1eaa9c4c9 2025-12-09
FileHash-MD5 b1a5c56edf70f327d7c7dbff3d861a94 MD5 of 2bfb560c7b34a2b4c30db711900d6e56d86f754f4fbeebe551b8c67bc30a2b36 2025-12-09
References (1)
↗ https://news.sophos.com/en-us/2025/12/06/inside-shanya-a-packer-as-a-service-fueling-modern-attacks/