Analysis
- max time kernel
0s - max time network
134s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
30/07/2026, 05:48
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt
- Size 13.3MB
- Sample260730-ghhd7adn2v
- SHA256 f3524ee4c20033d006375b7aff02cf9c7f69a5585245910615e16fe36574a0e4
- MD5 361906cd17bfd0301cb7c182a458a6e1
- SHA1 e543f548897662e32ee4067b63714889a6b548cf
- SHA512 cbdaf94346bded2f2b923a0f9006521825b7ec1e8d04290f12796db51ab9631f91f204df816aec55bbf54b1d83f050f764a717cdfec89b5051c7b20cf1c3ba20
- SSDEEP 196608:wiIm4Iy+ewHhaSO0b9yS5ybS9Hw2UZXhRU:wA5mmhaSO0b9yS5ybS9Hw2UZXHU
- TLSH T1B5E63913EDA900E8C0AED1348972A6677B713C494B7463D72B60F6647F73BD0A9BA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt -
description ioc Process File opened for reading /proc/self/cgroup 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /proc/self/mountinfo 2026-07-30_361906cd17bfd0301cb7c182a458a6e1_dosia_glassworm_poet-rat_qnapcrypt