General
- Target 2026-05-13_8d0eabb2c239d3ae54166f6a04f29f55_glassworm_poet-rat_qnapcrypt_rex_zxxz
- Size 7.0MB
- Sample260513-3v64zagw61
- SHA256 3924e7da78a0156c765850fdb0e08688ac33ac6ce2a1d57556ad0159173f89c6
- MD5 8d0eabb2c239d3ae54166f6a04f29f55
- SHA1 785c2e88da497b58fa9e2db9799b2ceb7dd20ebb
- SHA512 ad5c6d9ad2d9a6db823cccd39a64c3f7e1fd3faec02d86928badbebe6e991a15e6ea15d0a1bd5da3cff4206849df2eb08fb0344cd8bddc2a08f733ec139cb684
- SSDEEP 98304:DE1b8UT19vcSzjr5/YJ09uUa2megmG5OFZj8KIX:I98UJ+SzB4Ua2ac8K
- TLSH T1B7763A91E9CB10FAEA032D3191AFB23F573111068764EEC7DB485F52E87B5E2593324A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-13_8d0eabb2c239d3ae54166f6a04f29f55_glassworm_poet-rat_qnapcrypt_rex_zxxz
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-13_8d0eabb2c239d3ae54166f6a04f29f55_glassworm_poet-rat_qnapcrypt_rex_zxxz
- Size 7.0MB
- SHA256 3924e7da78a0156c765850fdb0e08688ac33ac6ce2a1d57556ad0159173f89c6
- MD5 8d0eabb2c239d3ae54166f6a04f29f55
- SHA1 785c2e88da497b58fa9e2db9799b2ceb7dd20ebb
- SHA512 ad5c6d9ad2d9a6db823cccd39a64c3f7e1fd3faec02d86928badbebe6e991a15e6ea15d0a1bd5da3cff4206849df2eb08fb0344cd8bddc2a08f733ec139cb684
- SSDEEP 98304:DE1b8UT19vcSzjr5/YJ09uUa2megmG5OFZj8KIX:I98UJ+SzB4Ua2ac8K
- TLSH T1B7763A91E9CB10FAEA032D3191AFB23F573111068764EEC7DB485F52E87B5E2593324A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.