General
- Target 2026-07-28_44b1322b8425db8238f90473826e60c9_dosia_glassworm_poet-rat_qnapcrypt
- Size 10.5MB
- Sample260728-ff5ahayycs
- SHA256 7a233e4b6f477ff2fe0fd6283efb074eb8da475bc90ae1b4055d288eec2f2567
- MD5 44b1322b8425db8238f90473826e60c9
- SHA1 4fbe3c110ec489d1352e7b2775afad75369aeecf
- SHA512 cabcd022468f3ea548952f85476e6f42f1781019e97e4f53f418f1a2c13cb84de7694b405c83e1812602093800ca1f0ac786ecb65e564a491787e6f0946b5f20
- SSDEEP 98304:FQhduvPu7GzyDLcBtGwu2ca4zqvEJj/2T2s0bcU21zBg+aZnb3Ee5:F1kABtXu2clmACiZbct7aNb0e5
- TLSH T13EB64A07ECA585E9C0EDD1718A669263BB717C495B2063D33B60F7282F73BD06AB9704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-28_44b1322b8425db8238f90473826e60c9_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_44b1322b8425db8238f90473826e60c9_dosia_glassworm_poet-rat_qnapcrypt
- Size 10.5MB
- SHA256 7a233e4b6f477ff2fe0fd6283efb074eb8da475bc90ae1b4055d288eec2f2567
- MD5 44b1322b8425db8238f90473826e60c9
- SHA1 4fbe3c110ec489d1352e7b2775afad75369aeecf
- SHA512 cabcd022468f3ea548952f85476e6f42f1781019e97e4f53f418f1a2c13cb84de7694b405c83e1812602093800ca1f0ac786ecb65e564a491787e6f0946b5f20
- SSDEEP 98304:FQhduvPu7GzyDLcBtGwu2ca4zqvEJj/2T2s0bcU21zBg+aZnb3Ee5:F1kABtXu2clmACiZbct7aNb0e5
- TLSH T13EB64A07ECA585E9C0EDD1718A669263BB717C495B2063D33B60F7282F73BD06AB9704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.