1103c053df0c3518fcebb6221b292c4ea6f8f132f8cecd20f4e8c5634e03491f

Analysis

max time kernel
149s
max time network
145s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24/08/2026, 09:47

Target
2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Size 9.2MB
Sample260824-lsbfvaep31
SHA256 1103c053df0c3518fcebb6221b292c4ea6f8f132f8cecd20f4e8c5634e03491f
MD5 6932216eb2e95e5e5cfa3f501e04068e
SHA1 426534689e0a6105ea66790c7608766311639bcf
SHA512 ebad976182024b9e8ae988244c247069fecc19757dcf9ae2605bbe7e75dd57d2ce764a2effc33ac2a5c147cd607aa559711d995bd44fc9e82d9a25407b491d59
SSDEEP 98304:NHc2AlD5d/duNC6zigYeOd9WP0Wh0E8LfSLQqZV:qV5kW9wNhN4f+QqZV
TLSH
T19EA63A47F85111E8D1AEE270C6225223FA703C895B3523E72B14F6F52F72BD45AB93A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell

/tmp/2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
/tmp/2026-08-23_6932216eb2e95e5e5cfa3f501e04068e_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
1⤵
- Enumerates kernel/hardware configuration
PID:1479

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact