public mosaic llc support@publicmosaic.com
malware sample

a7150979bda36ac0506df22700c6ed045f4728cf789f36cede83e315d4da2b16

A vShell sample, captured and analysed. Its family was read statically from the sample’s own bytes (an embedded ELF config). A network listener is never required for this record to exist.

a7150979bda36ac0506df22700c6ed045f4728cf789f36cede83e315d4da2b16

TLP:CLEAR

Sample

sha-256a7150979bda36ac0506df22700c6ed045f4728cf789f36cede83e315d4da2b16
familyvShell
provenancemined:elf_config
first seen2026-09-05 21:26 UTC
last seen2026-09-15 09:03 UTC

Observed served by 1 address

These addresses were seen DELIVERING this file. That is an observation of delivery, not an attribution — a widely distributed sample can reach unrelated hosts.