General
- Target 2026-09-05_4fb03b6b1cb7ddc74bca3800e77c0da4_dosia_glassworm_poet-rat_qnapcrypt_vshell
- Size 8.9MB
- Sample260907-25qpasv1bs
- SHA256 c154eea6bff43f6d7df4f4105a2c22dc5e8d4d5cd84331c42c11b4f354773f37
- MD5 4fb03b6b1cb7ddc74bca3800e77c0da4
- SHA1 dc917e3eb6d9cf9ecb45dd2e153386fd251f829c
- SHA512 30ec9c7666c0e14ae380897de880bf9dfe35b1cbe746318db037da744d7e5cbd6832e8aed235bbadcd3bb5e522f13a6f83d9ac4b36b8633b1b69a0bcb8b23f93
- SSDEEP 98304:T0v6hmir/Pc0YQbVnJLMwN+N6EZauDtY2Q+Z2/:BEkc/GVnJPAZauL2/
- TLSH T163965B17ECA140F8D1AEE2708A629263BA707C4D5B3133D72F50F6642F76BC0A979B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_4fb03b6b1cb7ddc74bca3800e77c0da4_dosia_glassworm_poet-rat_qnapcrypt_vshell
Resource
ubuntu1804-amd64-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
47.76.108.54
Attributes
-
port
8880
-
salt
vshell_encrypt_salt
-
type
kcp
-
vkey
vshell_vkey
Targets
-
- Target 2026-09-05_4fb03b6b1cb7ddc74bca3800e77c0da4_dosia_glassworm_poet-rat_qnapcrypt_vshell
- Size 8.9MB
- SHA256 c154eea6bff43f6d7df4f4105a2c22dc5e8d4d5cd84331c42c11b4f354773f37
- MD5 4fb03b6b1cb7ddc74bca3800e77c0da4
- SHA1 dc917e3eb6d9cf9ecb45dd2e153386fd251f829c
- SHA512 30ec9c7666c0e14ae380897de880bf9dfe35b1cbe746318db037da744d7e5cbd6832e8aed235bbadcd3bb5e522f13a6f83d9ac4b36b8633b1b69a0bcb8b23f93
- SSDEEP 98304:T0v6hmir/Pc0YQbVnJLMwN+N6EZauDtY2Q+Z2/:BEkc/GVnJPAZauL2/
- TLSH T163965B17ECA140F8D1AEE2708A629263BA707C4D5B3133D72F50F6642F76BC0A979B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10