General
- Target 2026-07-19_0b8790f44e38c2356bb116a8e0a32eb2_dosia_glassworm_poet-rat_qnapcrypt
- Size 7.5MB
- Sample260719-3prr4abs2t
- SHA256 ee793426a461ac5fc085115c485384c4bddff626b12c87b7663203fbd524529b
- MD5 0b8790f44e38c2356bb116a8e0a32eb2
- SHA1 d30139311511e5dac9057ccf9655176d7988b9d3
- SHA512 6e3b2e45f62689384ba2f216ff73705666faa3a3cf5ada3dbca5e5b30043a4a89bb548d2f1cc531c2f3d388175d3035830eefff3351fb4aaa27b3b863abdf139
- SSDEEP 49152:/hRopHv8LbNoATHvNOpCq0P4a+IrQcZbmTmJH6ynQp1nus3kZkbi6ZWL0CzSgKCd:/hyHEdB0mB61n13oei6ZWLrXEEgKN
- TLSH T1EE765A03FD6915E9C4ADD131CAB396627F617C894B2123C31B90B2287F73BD069B9768
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-19_0b8790f44e38c2356bb116a8e0a32eb2_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_0b8790f44e38c2356bb116a8e0a32eb2_dosia_glassworm_poet-rat_qnapcrypt
- Size 7.5MB
- SHA256 ee793426a461ac5fc085115c485384c4bddff626b12c87b7663203fbd524529b
- MD5 0b8790f44e38c2356bb116a8e0a32eb2
- SHA1 d30139311511e5dac9057ccf9655176d7988b9d3
- SHA512 6e3b2e45f62689384ba2f216ff73705666faa3a3cf5ada3dbca5e5b30043a4a89bb548d2f1cc531c2f3d388175d3035830eefff3351fb4aaa27b3b863abdf139
- SSDEEP 49152:/hRopHv8LbNoATHvNOpCq0P4a+IrQcZbmTmJH6ynQp1nus3kZkbi6ZWL0CzSgKCd:/hyHEdB0mB61n13oei6ZWLrXEEgKN
- TLSH T1EE765A03FD6915E9C4ADD131CAB396627F617C894B2123C31B90B2287F73BD069B9768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.