General
- Target 2026-06-02_2775a2c21c9c67e907ed9499ef4dcb28_dosia_glassworm_poet-rat_qnapcrypt
- Size 9.4MB
- Sample260602-t89ycaay2t
- SHA256 86d162d2e4ae90daad260faa7df25be2e28bc70a97d0d0548d80a670177a2739
- MD5 2775a2c21c9c67e907ed9499ef4dcb28
- SHA1 197b46e96304c8639bf35e0ff33bda4cd5f05660
- SHA512 6d92c55b6d45c4355425b1be63f117e48166d577186b070b26cbc74460ae3f22bb7a9d56320dc1b59dd09851a8f644f8046de2e3b58157ba7277a0116291b897
- SSDEEP 98304:PMXdnGsKQGLpLyWCqpbIEHrYytNMHMOHDz86h3fWX4:PsGaG2JqXUuOMOk6lfWX4
- TLSH T10FA68B47EC6529E5C1ED8230897391527B717C494F2263D32F60F2297FB2BE4AAB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-02_2775a2c21c9c67e907ed9499ef4dcb28_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_2775a2c21c9c67e907ed9499ef4dcb28_dosia_glassworm_poet-rat_qnapcrypt
- Size 9.4MB
- SHA256 86d162d2e4ae90daad260faa7df25be2e28bc70a97d0d0548d80a670177a2739
- MD5 2775a2c21c9c67e907ed9499ef4dcb28
- SHA1 197b46e96304c8639bf35e0ff33bda4cd5f05660
- SHA512 6d92c55b6d45c4355425b1be63f117e48166d577186b070b26cbc74460ae3f22bb7a9d56320dc1b59dd09851a8f644f8046de2e3b58157ba7277a0116291b897
- SSDEEP 98304:PMXdnGsKQGLpLyWCqpbIEHrYytNMHMOHDz86h3fWX4:PsGaG2JqXUuOMOk6lfWX4
- TLSH T10FA68B47EC6529E5C1ED8230897391527B717C494F2263D32F60F2297FB2BE4AAB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1