Overview

overview

3

Static

static

1

2026-08-08...pcrypt

ubuntu-18.04-amd64

3

Analysis

  • max time kernel
    1s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08/08/2026, 06:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-08_0e79416bf414054dcdcde57aa246a389_dosia_glassworm_poet-rat_qnapcrypt
  • Size 21.2MB
  • Sample260808-hev2jscc44
  • SHA256 e954adbe1a63f3f684f87f15d0d8cfd3d144238cb1421b8c89b9c4697a9bd8c4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/2026-08-08_0e79416bf414054dcdcde57aa246a389_dosia_glassworm_poet-rat_qnapcrypt
    /tmp/2026-08-08_0e79416bf414054dcdcde57aa246a389_dosia_glassworm_poet-rat_qnapcrypt
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    • Writes file to tmp directory
    PID:1478

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        obscura.db
        • Path /tmp/.obscura/obscura.db
        • Size 16KB
        • SHA256 f80ea184425737cdc7de57b1c8d4797e8a57ccee797991395e3800cd4ed0ac1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        obscura.db
        • Path /tmp/.obscura/obscura.db
        • Size 24KB
        • SHA256 edc5479528d2f418ec0f489a060e0fee258c1dda7adb90cd5ff11913484edd50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download