Analysis
- max time kernel
131s - max time network
135s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
10/08/2026, 04:27
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt
- Size 5.7MB
- Sample260810-e3lw1abj2w
- SHA256 82a167d8e2817a0a3eeb685ad9426b1b8a1fa4d723b568f2e42b7083bb087826
- MD5 8b5db0eec9d25e89786272da819fbc2d
- SHA1 11034c755ac3796936e71c791d753446cfd11e9b
- SHA512 e363bb1ea803cfac29d352b59c8f9e7bb408d8395bd53f6a39828e2a73d62f276ab474e1ea9db52606a76c04dda7c8faa59dae12379ba4ea4712949274a9862c
- SSDEEP 49152:XpmwX7gi2XkoR/Qmp2yR2qhl3cHNc56kLamzqL0ByzUqsN5XxGPRSGKlK1KcTRdK:XpPMiswzmIIyD1TXKE6
- TLSH T15D564943ECA555E9C1AED130C9729152BB72BC885B3163D32F60F2382F76BD0A9B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt -
description ioc Process File opened for reading /proc/self/cgroup 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt File opened for reading /proc/self/mountinfo 2026-08-10_8b5db0eec9d25e89786272da819fbc2d_dosia_glassworm_poet-rat_qnapcrypt