vshell | 2026-09-06_a64b51df387848641763f667504229fc_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

General

Target
2026-09-06_a64b51df387848641763f667504229fc_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Size 7.5MB
Sample260906-zs6tmsgm9z
SHA256 2a5aedfc7688f16cf286f2295cac83dc8db52e2781fdee6df18de80004e02ee9
MD5 a64b51df387848641763f667504229fc
SHA1 ce593ad404c771fb2c4392ddc14f88e2cc52d562
SHA512 fb58c941abdfb52546f05593d3cc7cbd3e4eced46cf51852c4759f2ba94a8d8579145e3ed24dc1e46f995c1fdeed6287f82b82ef1a4c39aca1318f3bc02e80e3
SSDEEP 49152:oVUN0FV5u1OuzgYrrb/T8vO90d7HjmAFd4A64nsfJpGWEDffAZg0BkZ+JZUS95J:okTzEN0BZFV6JxYr9zEQIzl5r
TLSH
T1BA862A47F85151E8C0AED134C6268663BA707C895B3027D72B60F6B82F73BE46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor rat vshell

Family: VShell
VShell is a cross-platform Go-based RAT and C2 framework targeting Windows and Linux.
backdoor rat vshell

Detects VSHELL Backdoor 1 IoCs

resource	yara_rule
sample	family_vshell

2026-09-06_a64b51df387848641763f667504229fc_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

.elf 7.5MB

SHA256 2a5aedfc7688f16cf286f2295cac83dc8db52e2781fdee6df18de80004e02ee9
MD5 a64b51df387848641763f667504229fc
SHA1 ce593ad404c771fb2c4392ddc14f88e2cc52d562
SHA512 fb58c941abdfb52546f05593d3cc7cbd3e4eced46cf51852c4759f2ba94a8d8579145e3ed24dc1e46f995c1fdeed6287f82b82ef1a4c39aca1318f3bc02e80e3
SSDEEP 49152:oVUN0FV5u1OuzgYrrb/T8vO90d7HjmAFd4A64nsfJpGWEDffAZg0BkZ+JZUS95J:okTzEN0BZFV6JxYr9zEQIzl5r
TLSH
T1BA862A47F85151E8C0AED134C6268663BA707C895B3027D72B60F6B82F73BE46E7A354
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64