0909da739c85d4131913e8f856e07409d3c83644d8ff4a86cf4e39791b698911

Analysis

max time kernel
71s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260127-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260127-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02/02/2026, 00:37

Target
2026-02-02_7ddefaa2a159d0ee8ff3945a8d6b33d6_dosia_glassworm_poet-rat_qnapcrypt_sliver
Size 29.4MB
Sample260202-aygz2aav8a
SHA256 0909da739c85d4131913e8f856e07409d3c83644d8ff4a86cf4e39791b698911
MD5 7ddefaa2a159d0ee8ff3945a8d6b33d6
SHA1 f9652123691adac1e716b919ae828ab389629dda
SHA512 e8d249910ac7a9197f1b00c3f209b00089f2baf7c5540d16bb1ce035f76508de56bae3fb7fdd86e8fa28db249c6402cd89b7268d73fc80f8577f0313c5c313a7
SSDEEP 196608:sYDC1zj5LPSRXyIelTuFEpQs/F4VsV8OPFLrB5/SMksBbOAe6L008hxMauQ7:sMCV5YheR/zV7PFPG7zaQ0eMauA
TLSH
T11D678D43F84580E8C1EDD530C6668262BB717C895B7427D33B60FA792E72BD86A7E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-02-02_7ddefaa2a159d0ee8ff3945a8d6b33d6_dosia_glassworm_poet-rat_qnapcrypt_sliver

/tmp/2026-02-02_7ddefaa2a159d0ee8ff3945a8d6b33d6_dosia_glassworm_poet-rat_qnapcrypt_sliver
/tmp/2026-02-02_7ddefaa2a159d0ee8ff3945a8d6b33d6_dosia_glassworm_poet-rat_qnapcrypt_sliver
1⤵
- Enumerates kernel/hardware configuration
PID:1541

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact