gentlemen | 2026-10-02_1f33ebe6772530788edabb2444a177a9_dosia_glassworm_qnapcrypt

General

Target
2026-10-02_1f33ebe6772530788edabb2444a177a9_dosia_glassworm_qnapcrypt
Size 2.5MB
Sample261003-tpf6xssclc
SHA256 2d43dcca6515fe038ccd5f05eff85c0f61268fae246d3ca8ab016e5d3eeaba95
MD5 1f33ebe6772530788edabb2444a177a9
SHA1 9b8d4c23e1685b24f8b2728e5740d4348480378c
SHA512 6549d3e6c8d29aa950df9a0f9766855da3350d8ee9acb57c22ea4b75b7d907cf8fc7af5cb457750ee1e44c31e019f3a2ba4184aa00092326be4f3d9793c7f1c6
SSDEEP 49152:PNOFZOMzHUEVNLdiJy89kdkxooWgHMJUiOfqvaXa5El:PNZMTq9kWqvaXwEl
TLSH
T1F1C55B97FC9114A5C0AEA236C9A74592BB71BC452F3123DB2F50BA782F73BD06879704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: Gentlemen
Gentlemen is a ransomware written in Golang.
ransomware gentlemen

Detects Gentlemen Ransomware Linux version 1 IoCs

resource	yara_rule
sample	family_gentlemen_elf

2026-10-02_1f33ebe6772530788edabb2444a177a9_dosia_glassworm_qnapcrypt

.elf 2.5MB

SHA256 2d43dcca6515fe038ccd5f05eff85c0f61268fae246d3ca8ab016e5d3eeaba95
MD5 1f33ebe6772530788edabb2444a177a9
SHA1 9b8d4c23e1685b24f8b2728e5740d4348480378c
SHA512 6549d3e6c8d29aa950df9a0f9766855da3350d8ee9acb57c22ea4b75b7d907cf8fc7af5cb457750ee1e44c31e019f3a2ba4184aa00092326be4f3d9793c7f1c6
SSDEEP 49152:PNOFZOMzHUEVNLdiJy89kdkxooWgHMJUiOfqvaXa5El:PNZMTq9kWqvaXwEl
TLSH
T1F1C55B97FC9114A5C0AEA236C9A74592BB71BC452F3123DB2F50BA782F73BD06879704
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64