vshell | 2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

General

Target
2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Size 9.2MB
Sample260824-lsbfvaep31
SHA256 1103c053df0c3518fcebb6221b292c4ea6f8f132f8cecd20f4e8c5634e03491f
MD5 6932216eb2e95e5e5cfa3f501e04068e
SHA1 426534689e0a6105ea66790c7608766311639bcf
SHA512 ebad976182024b9e8ae988244c247069fecc19757dcf9ae2605bbe7e75dd57d2ce764a2effc33ac2a5c147cd607aa559711d995bd44fc9e82d9a25407b491d59
SSDEEP 98304:NHc2AlD5d/duNC6zigYeOd9WP0Wh0E8LfSLQqZV:qV5kW9wNhN4f+QqZV
TLSH
T19EA63A47F85111E8D1AEE270C6225223FA703C895B3523E72B14F6F52F72BD45AB93A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor rat vshell

Family: VShell
VShell is a cross-platform Go-based RAT and C2 framework targeting Windows and Linux.
backdoor rat vshell

Detects VSHELL Backdoor 1 IoCs

resource	yara_rule
sample	family_vshell

2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

.elf 9.2MB

SHA256 1103c053df0c3518fcebb6221b292c4ea6f8f132f8cecd20f4e8c5634e03491f
MD5 6932216eb2e95e5e5cfa3f501e04068e
SHA1 426534689e0a6105ea66790c7608766311639bcf
SHA512 ebad976182024b9e8ae988244c247069fecc19757dcf9ae2605bbe7e75dd57d2ce764a2effc33ac2a5c147cd607aa559711d995bd44fc9e82d9a25407b491d59
SSDEEP 98304:NHc2AlD5d/duNC6zigYeOd9WP0Wh0E8LfSLQqZV:qV5kW9wNhN4f+QqZV
TLSH
T19EA63A47F85111E8D1AEE270C6225223FA703C895B3523E72B14F6F52F72BD45AB93A4
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64