Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    17/08/2026, 18:46

General

  • Target
    2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt
  • Size 14.4MB
  • Sample260817-xe277axbmd
  • SHA256 ec41189526ad49629c36a1a3fd2fbf06990a231c3af010584490b86505d47ecd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

  • GoLang User-Agent 1 IoCs

    Uses default user-agent string defined by GoLang HTTP packages.

Processes

  • /tmp/2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt
    /tmp/2026-08-17_85f84df30f0842b41fcfb532b5695bd1_poet-rat_qnapcrypt
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1503

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads