Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
17/08/2026, 18:46
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
General
- Target 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt
- Size 14.4MB
- Sample260817-xe277axbmd
- SHA256 ec41189526ad49629c36a1a3fd2fbf06990a231c3af010584490b86505d47ecd
- MD5 85f84df30f0842b41fcfb532b5695bd1
- SHA1 25edcb097006572872a9e1f966dd25342b7a135a
- SHA512 3ede7199ce596d42e28192ca65823e80e42921e9eae2e1be37414822e6f4604faea183d04e6e3f844bb236666580d761df447b0545aff6d7591570354f2fbbb7
- SSDEEP 98304:GlUsIFktk2FscI7PaCdwk7Ng0yp6SafoEE7k4rimafl6r/98zuk5I1BREVI:GCFktk2FIwR0yp6SmS7k4jafl46u/B
- TLSH T150E64B87E8E22D95C4EAC170D139825BB9627C0D1B7823DB17E1F3241F36BD06A76792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt -
description ioc Process File opened for reading /proc/self/mountinfo 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt File opened for reading /proc/self/cgroup 2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt - GoLang User-Agent 1 IoCs
Uses default user-agent string defined by GoLang HTTP packages.
description flow ioc HTTP User-Agent header 2 Go-http-client/1.1