General
- Target 2026-06-27_cfef27c8da0ff84754b833614c441828_coinminer_dosia_eternalromance_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
- Size 4.9MB
- Sample260629-c6wt9scw4k
- SHA256 24beada29fb0de9aae295003e0c887182c8297b02a62284cc50b622de52735bb
- MD5 cfef27c8da0ff84754b833614c441828
- SHA1 23681aaca026c28394d3898be44ed74f21d488de
- SHA512 a81e6bdeaf581890cb8de41a2bcc20a507d4e0b1fb6004c4fed26f4a2ea9869fc50568c66c1ed2914bd18194637b03cbcfcbc9441e8ebc2368abcc4667ebb60c
- SSDEEP 49152:dEqDMoBckwpEetqSGDqfDgAxnAjYJRk70MqVZMicmo9Kh8AEBh5Ego:oAcbgAV0cPIEgo
- TLSH T1DB365A13FC9199E5C0AEA231C96291527B723C456F3127CB3B90B7683F32BD09A7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-27_cfef27c8da0ff84754b833614c441828_coinminer_dosia_eternalromance_glassworm_hive_luca-steal.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_cfef27c8da0ff84754b833614c441828_coinminer_dosia_eternalromance_glassworm_hive_luca-steal.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_cfef27c8da0ff84754b833614c441828_coinminer_dosia_eternalromance_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
- Size 4.9MB
- SHA256 24beada29fb0de9aae295003e0c887182c8297b02a62284cc50b622de52735bb
- MD5 cfef27c8da0ff84754b833614c441828
- SHA1 23681aaca026c28394d3898be44ed74f21d488de
- SHA512 a81e6bdeaf581890cb8de41a2bcc20a507d4e0b1fb6004c4fed26f4a2ea9869fc50568c66c1ed2914bd18194637b03cbcfcbc9441e8ebc2368abcc4667ebb60c
- SSDEEP 49152:dEqDMoBckwpEetqSGDqfDgAxnAjYJRk70MqVZMicmo9Kh8AEBh5Ego:oAcbgAV0cPIEgo
- TLSH T1DB365A13FC9199E5C0AEA231C96291527B723C456F3127CB3B90B7683F32BD09A7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects ShinySp1d3r payload
-
Family: ShinySp1d3r
ShinySp1d3r is a ransomware created by ShinyHunters, first seen in November 2025.
-
UPX dump on OEP (original entry point)