vshell | 2026-09-04_04ba3999e8530a3cca0dec4a4e40eabb_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

General

Target
2026-09-04_04ba3999e8530a3cca0dec4a4e40eabb_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Size 7.6MB
Sample260905-yarrbs1elf
SHA256 4e1af7944c8ccdc936bd4c209e02f048e6f9e00368fbb8371ac669b9f3370eeb
MD5 04ba3999e8530a3cca0dec4a4e40eabb
SHA1 24a04e89e2440aec26499ca3e0412d4ded38e87e
SHA512 9b1e00b3583dcc0409f980e025385051fc79fc3da84e154690ed7a61e77585d191b40e4e2616110760d6667303caea79e572fee8c4bb2d17c89f138d16d154a1
SSDEEP 49152:Qtps6v6SMU1frb/ThvO90d7HjmAFd4A64nsfJkE71ZXJa7HSI8Sr3hgoHWcn4bM4:oM4NC1n4H6MNLL0wNKBwpEBre15ZOj
TLSH
T175860847F89181E9C0EED134C6669262BA707C895B3023E73B50F7B42B36BD46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor rat vshell

Family: VShell
VShell is a cross-platform Go-based RAT and C2 framework targeting Windows and Linux.
backdoor rat vshell

Detects VSHELL Backdoor 1 IoCs

resource	yara_rule
sample	family_vshell

2026-09-04_04ba3999e8530a3cca0dec4a4e40eabb_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

.elf 7.6MB

SHA256 4e1af7944c8ccdc936bd4c209e02f048e6f9e00368fbb8371ac669b9f3370eeb
MD5 04ba3999e8530a3cca0dec4a4e40eabb
SHA1 24a04e89e2440aec26499ca3e0412d4ded38e87e
SHA512 9b1e00b3583dcc0409f980e025385051fc79fc3da84e154690ed7a61e77585d191b40e4e2616110760d6667303caea79e572fee8c4bb2d17c89f138d16d154a1
SSDEEP 49152:Qtps6v6SMU1frb/ThvO90d7HjmAFd4A64nsfJkE71ZXJa7HSI8Sr3hgoHWcn4bM4:oM4NC1n4H6MNLL0wNKBwpEBre15ZOj
TLSH
T175860847F89181E9C0EED134C6669262BA707C895B3023E73B50F7B42B36BD46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64