General
- Target 2026-08-06_bc4d03e1a99084f666abe1b4c5c1ed5d_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.5MB
- Sample260807-al2tnsdb33
- SHA256 e4d64b6187bbc5810b15740e72281007668f37e6f045967ee3456be8bab3a3d3
- MD5 bc4d03e1a99084f666abe1b4c5c1ed5d
- SHA1 b259de5dbe4b551494cb60f8c9be0cd72cbaf959
- SHA512 6605f3ce941f6353be80d88f8b88b9a29f4f4e561b370835fc7d533166eccbb931a5777e2d3b238551a75f27e2739b4dde445ff93f7797323adab55bf92449b7
- SSDEEP 49152:ORNgRUoIGM0IDVoGJvh2+9eRRIuTdpjwwq31hPFIKBkb8OIR3C5ED:jUoIGZGJZe1dpjBqXCED
- TLSH T1B6462810FECB54F6E9431A3014BBA26F63315D058F24EBD7EA447F2AF9376A1083615A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-06_bc4d03e1a99084f666abe1b4c5c1ed5d_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_bc4d03e1a99084f666abe1b4c5c1ed5d_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.5MB
- SHA256 e4d64b6187bbc5810b15740e72281007668f37e6f045967ee3456be8bab3a3d3
- MD5 bc4d03e1a99084f666abe1b4c5c1ed5d
- SHA1 b259de5dbe4b551494cb60f8c9be0cd72cbaf959
- SHA512 6605f3ce941f6353be80d88f8b88b9a29f4f4e561b370835fc7d533166eccbb931a5777e2d3b238551a75f27e2739b4dde445ff93f7797323adab55bf92449b7
- SSDEEP 49152:ORNgRUoIGM0IDVoGJvh2+9eRRIuTdpjwwq31hPFIKBkb8OIR3C5ED:jUoIGZGJZe1dpjBqXCED
- TLSH T1B6462810FECB54F6E9431A3014BBA26F63315D058F24EBD7EA447F2AF9376A1083615A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.