2026-07-22_611d407375352bb91da1e3558db8c0a1_glassworm_qilin_revil
- SHA256 eebdc7321d3eaece1be2c439caaa9bd27a8515fb7063aec82bce49afaf43f9f6
-
family_qilin
Detects Qilin payload
Behavioral task
behavioral1
Sample
2026-07-22_611d407375352bb91da1e3558db8c0a1_glassworm_qilin_revil
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
2026-07-22_611d407375352bb91da1e3558db8c0a1_glassworm_qilin_revil
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
2026-07-22_611d407375352bb91da1e3558db8c0a1_glassworm_qilin_revil
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
2026-07-22_611d407375352bb91da1e3558db8c0a1_glassworm_qilin_revil
Resource
debian9-mipsel-20260513-en
A ransomware targeting VMware ESXi servers. It was first seen in December 2023.
Detects Qilin payload
| resource | yara_rule |
|---|---|
| sample | family_qilin |
family_qilin
Detects Qilin payload