General
- Target 2026-07-10_d6d2499ed3cf41b226daa50614502606_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
- Size 7.5MB
- Sample260710-qmnansct2w
- SHA256 aa36c1d6ef21fed5ffc498831e9e6f82b6511d5a3b0fd02064f9ef23d8db72eb
- MD5 d6d2499ed3cf41b226daa50614502606
- SHA1 167b7083ef84ca457d1155aba56b018db66f3696
- SHA512 0378e1ed47e2d08021e9cd1ec31c3612e11d1a0fa3b49c30b8811faa6cacb02cd126af293e494e205c0300451c38e6a5ea3cbf313db23402eb4191d3d512001a
- SSDEEP 49152:sRm6tkO15VlRArb/TivO90d7HjmAFd4A64nsfJIyMVmbfugZjs38LVBiz6LbtPXw:glRJXp8L/KyZcCb7PEew+k
- TLSH T143862847F89041E8C0EED174CA669263BA707C895B3063D72B50F7B82F72BD46A7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-10_d6d2499ed3cf41b226daa50614502606_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_d6d2499ed3cf41b226daa50614502606_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
- Size 7.5MB
- SHA256 aa36c1d6ef21fed5ffc498831e9e6f82b6511d5a3b0fd02064f9ef23d8db72eb
- MD5 d6d2499ed3cf41b226daa50614502606
- SHA1 167b7083ef84ca457d1155aba56b018db66f3696
- SHA512 0378e1ed47e2d08021e9cd1ec31c3612e11d1a0fa3b49c30b8811faa6cacb02cd126af293e494e205c0300451c38e6a5ea3cbf313db23402eb4191d3d512001a
- SSDEEP 49152:sRm6tkO15VlRArb/TivO90d7HjmAFd4A64nsfJIyMVmbfugZjs38LVBiz6LbtPXw:glRJXp8L/KyZcCb7PEew+k
- TLSH T143862847F89041E8C0EED174CA669263BA707C895B3063D72B50F7B82F72BD46A7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.