General
- Target 2026-07-02_b4dd782c326417bbece4a3e6ec91d44f_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.8MB
- Sample260702-ye55hsdv3w
- SHA256 d607d48e581b2cc0a50eafa0f7c53ec0f434abba69cd2318a2bc76205694e756
- MD5 b4dd782c326417bbece4a3e6ec91d44f
- SHA1 6f1b30346f80cd91c96112c3c6b4b349caad1c4a
- SHA512 f326a5b1bc9ee20dd0ddb38552c75d3df70dbe5acc74b6463ab8b6206ca8e267fb5116438eaa8646a36d414e9ab2c4b35a825ec60658d55ade05e0b6a4f51d59
- SSDEEP 49152:m79oA3saB0SFgrtQbIjTbjsoqhv7RfNKZgsM2p3zXl9pLVMyLQE38G5E25EG:qoAXBcrtG2WKMm3znjFEG
- TLSH T182561811FE8B44F6E9431D3014ABA22F63315C098F24DBD7EB447F6AF97B6A11932219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_b4dd782c326417bbece4a3e6ec91d44f_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b4dd782c326417bbece4a3e6ec91d44f_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.8MB
- SHA256 d607d48e581b2cc0a50eafa0f7c53ec0f434abba69cd2318a2bc76205694e756
- MD5 b4dd782c326417bbece4a3e6ec91d44f
- SHA1 6f1b30346f80cd91c96112c3c6b4b349caad1c4a
- SHA512 f326a5b1bc9ee20dd0ddb38552c75d3df70dbe5acc74b6463ab8b6206ca8e267fb5116438eaa8646a36d414e9ab2c4b35a825ec60658d55ade05e0b6a4f51d59
- SSDEEP 49152:m79oA3saB0SFgrtQbIjTbjsoqhv7RfNKZgsM2p3zXl9pLVMyLQE38G5E25EG:qoAXBcrtG2WKMm3znjFEG
- TLSH T182561811FE8B44F6E9431D3014ABA22F63315C098F24DBD7EB447F6AF97B6A11932219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.