General
- Target 2026-08-07_8726279a46256e18c8237cd168178ca3_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.4MB
- Sample260807-s8611syere
- SHA256 9e0b4d080bb51d1686f1a24d6b225bd6ae9436c5b4deec956da9b36e1ba930fb
Score
7/10
Malware Config
Targets
-
- Target 2026-08-07_8726279a46256e18c8237cd168178ca3_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.4MB
- SHA256 9e0b4d080bb51d1686f1a24d6b225bd6ae9436c5b4deec956da9b36e1ba930fb
Score7/10Reads EFI boot settings
Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.
Checks SCSI settings
Checks list of SCSI devices which may be used to detect VMware or VirtualBox.
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Checks mountinfo of local process
Checks mountinfo of running processes which indicate if it is running in chroot jail.
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.
MITRE ATT&CK Enterprise v16
Defense Evasion
Pre-OS Boot
1Bootkit
1Virtualization/Sandbox Evasion
5System Checks
4