public mosaic llc support@publicmosaic.com
malware sample

719e343a740f7f83415ca1c464743596a2798caf7d3d80589861bbaac264fedc

A vShell sample, captured and detonated in a sandbox. Its family was confirmed by detonating the sample and extracting its configuration. A network listener is never required for this record to exist.

719e343a740f7f83415ca1c464743596a2798caf7d3d80589861bbaac264fedc

TLP:CLEAR

Sample

sha-256719e343a740f7f83415ca1c464743596a2798caf7d3d80589861bbaac264fedc
familyvShell
provenancemined:cape
first seen2026-09-04 21:24 UTC
last seen2026-09-15 09:07 UTC

Observed served by 1 address

These addresses were seen DELIVERING this file. That is an observation of delivery, not an attribution — a widely distributed sample can reach unrelated hosts.