General
- Target 2026-07-28_4fb398fc2971d96cd6eaf2555703e4b6_dosia_glassworm_poet-rat_qnapcrypt
- Size 8.6MB
- Sample260729-bm22ha1ere
- SHA256 5644043a469b380bcf62f61911e375dc353888ddd5537e07c38b7f4508dd1244
- MD5 4fb398fc2971d96cd6eaf2555703e4b6
- SHA1 77cc5678ab03de3f055628ef18c421a783ab6ac2
- SHA512 23feb1455fd35273491640cbbdb85be28bde216be4419f72b2c8c822ed0b5b956a2e1eff8e79ae4fde9f4529331c6c30012414d888e6057070e4f7794c91059b
- SSDEEP 98304:BX7vhJ5c91u5yTSEGE97cjdSxvTjuk0OGPJzfnjqpzCl9:BL21uAbGecJSQhJQGP
- TLSH T13D968D03FC5928E9C1EE923589739252BB717C4A1B3163D32B60F2396E77BD4A979304
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-28_4fb398fc2971d96cd6eaf2555703e4b6_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_4fb398fc2971d96cd6eaf2555703e4b6_dosia_glassworm_poet-rat_qnapcrypt
- Size 8.6MB
- SHA256 5644043a469b380bcf62f61911e375dc353888ddd5537e07c38b7f4508dd1244
- MD5 4fb398fc2971d96cd6eaf2555703e4b6
- SHA1 77cc5678ab03de3f055628ef18c421a783ab6ac2
- SHA512 23feb1455fd35273491640cbbdb85be28bde216be4419f72b2c8c822ed0b5b956a2e1eff8e79ae4fde9f4529331c6c30012414d888e6057070e4f7794c91059b
- SSDEEP 98304:BX7vhJ5c91u5yTSEGE97cjdSxvTjuk0OGPJzfnjqpzCl9:BL21uAbGecJSQhJQGP
- TLSH T13D968D03FC5928E9C1EE923589739252BB717C4A1B3163D32B60F2396E77BD4A979304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates running processes
Discovers information about currently running processes on the system
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.