General
- Target 2026-08-08_4610414bcd3eeb7089ac7b870c27b4a0_dosia_glassworm_poet-rat_qnapcrypt_sliver
- Size 11.1MB
- Sample260808-d84hkahj71
- SHA256 2e4c1f3c39c29e0fa514d1d7bc174a37aa574b6ebc0484d6ca9300f9fa4f7b85
- MD5 4610414bcd3eeb7089ac7b870c27b4a0
- SHA1 795674f537c94ab9f313fb50eb614c933d4c079c
- SHA512 e68d6fd03614a3bb11c64dd5d4781a2067943998788f31967045a41244782c0766af41582c707f9b766b8c9f1a6e43c4093a42a8a2d395e030843b5212e59644
- SSDEEP 98304:fmRTUO1jiEg04hC5f3VRbiG8uD6FDVxnzdyPZIebi8JAQV847HE:Og0ji4fpF5VuVxnzdyPzWdmk
- TLSH T1B7C64A1BEDA454D8C0BDD17189229663BB717C894B3423D71B60F6282F73FE46ABA740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_4610414bcd3eeb7089ac7b870c27b4a0_dosia_glassworm_poet-rat_qnapcrypt_sliver
Resource
ubuntu1804-amd64-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4610414bcd3eeb7089ac7b870c27b4a0_dosia_glassworm_poet-rat_qnapcrypt_sliver
- Size 11.1MB
- SHA256 2e4c1f3c39c29e0fa514d1d7bc174a37aa574b6ebc0484d6ca9300f9fa4f7b85
- MD5 4610414bcd3eeb7089ac7b870c27b4a0
- SHA1 795674f537c94ab9f313fb50eb614c933d4c079c
- SHA512 e68d6fd03614a3bb11c64dd5d4781a2067943998788f31967045a41244782c0766af41582c707f9b766b8c9f1a6e43c4093a42a8a2d395e030843b5212e59644
- SSDEEP 98304:fmRTUO1jiEg04hC5f3VRbiG8uD6FDVxnzdyPZIebi8JAQV847HE:Og0ji4fpF5VuVxnzdyPzWdmk
- TLSH T1B7C64A1BEDA454D8C0BDD17189229663BB717C894B3423D71B60F6282F73FE46ABA740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
-
Enumerates running processes
Discovers information about currently running processes on the system