vshell | 2026-08-25_e76159b7c340cfea7fc9f67e7070b024_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

General

Target
2026-08-25_e76159b7c340cfea7fc9f67e7070b024_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Size 7.4MB
Sample260826-e47j4ascjh
SHA256 28fddcb9dc0e960938612035b19faf4acef4d8f1c2cd3ceca673263bd5cdc6d1
MD5 e76159b7c340cfea7fc9f67e7070b024
SHA1 c4fa611f81cdf875ceedcf47a9418dc546f188c8
SHA512 32ae16e6deea7b5a88baf3337190cf2d26ff59dec1491740aeb4dba8cf620a9c1504a3e183a0332e63a1e6ecc7b708cc7b5cabda73ff859d018cf7f5234594f4
SSDEEP 49152:0Y5QmyoRp6lrb/TrvO90d7HjmAFd4A64nsfJvfUmDD2jFeGpnL5+BDFDPbzecl/a:F6COplaDFb54Dt4elE/SA0n
TLSH
T1F0763947F89151E8C0AEE174C6668663BA707C894B3023D73B50F7B82B72BD46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor rat vshell

Family: VShell
VShell is a cross-platform Go-based RAT and C2 framework targeting Windows and Linux.
backdoor rat vshell

Detects VSHELL Backdoor 1 IoCs

resource	yara_rule
sample	family_vshell

2026-08-25_e76159b7c340cfea7fc9f67e7070b024_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

.elf 7.4MB

SHA256 28fddcb9dc0e960938612035b19faf4acef4d8f1c2cd3ceca673263bd5cdc6d1
MD5 e76159b7c340cfea7fc9f67e7070b024
SHA1 c4fa611f81cdf875ceedcf47a9418dc546f188c8
SHA512 32ae16e6deea7b5a88baf3337190cf2d26ff59dec1491740aeb4dba8cf620a9c1504a3e183a0332e63a1e6ecc7b708cc7b5cabda73ff859d018cf7f5234594f4
SSDEEP 49152:0Y5QmyoRp6lrb/TrvO90d7HjmAFd4A64nsfJvfUmDD2jFeGpnL5+BDFDPbzecl/a:F6COplaDFb54Dt4elE/SA0n
TLSH
T1F0763947F89151E8C0AEE174C6668663BA707C894B3023D73B50F7B82B72BD46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64