General
- Target 2026-07-03_21172cd3301d5d94da43830815d98ea3_glassworm_poet-rat_qnapcrypt
- Size 4.6MB
- Sample260703-e4hkzags8q
- SHA256 bffc177b5d17e84d601c42cb04a31793e9f6b5d0dfaa63f9ac8f2e029976c2ce
Score
6/10
Malware Config
Targets
-
- Target 2026-07-03_21172cd3301d5d94da43830815d98ea3_glassworm_poet-rat_qnapcrypt
- Size 4.6MB
- SHA256 bffc177b5d17e84d601c42cb04a31793e9f6b5d0dfaa63f9ac8f2e029976c2ce
Score6/10-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1