General
- Target 2026-07-21_a6ec46c070e009214650b7e25e65360f_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.4MB
- Sample260721-vcvn8a1bke
- SHA256 7ab794f17fcab61c64dc163bc9395889f4e1222f1009c958f31fc98b57a35be7
Score
7/10
Malware Config
Targets
-
- Target 2026-07-21_a6ec46c070e009214650b7e25e65360f_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.4MB
- SHA256 7ab794f17fcab61c64dc163bc9395889f4e1222f1009c958f31fc98b57a35be7
Score7/10Reads EFI boot settings
Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.
Checks SCSI settings
Checks list of SCSI devices which may be used to detect VMware or VirtualBox.
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Checks mountinfo of local process
Checks mountinfo of running processes which indicate if it is running in chroot jail.
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.
MITRE ATT&CK Enterprise v16
Defense Evasion
Pre-OS Boot
1Bootkit
1Virtualization/Sandbox Evasion
5System Checks
4