General
- Target 2026-08-23_1be92670fd5caf74ea04e24e3c5ab25c_glassworm_poet-rat_qnapcrypt_vshell
- Size 7.2MB
- Sample260824-tpchqsal9s
- SHA256 53afacf4268dee89fd853515baa66b4a7ad65a16b75cecc1e2a909ecc34debfe
- MD5 1be92670fd5caf74ea04e24e3c5ab25c
- SHA1 232f4a9d1136be65724ed4da98eaee02d6dac321
- SHA512 80641f4d0094fa6fad1e8280358aec45721c0942fb32d26dca61a790bdb356dac59abcdc908eaad22d1f7a44c338bce7dfc1d42495e5a439470448f5d0fa178c
- SSDEEP 49152:eZSIA2Jd2OzFnOkKUZGSdGqpY2nTbgQqjjXe7H14TyP6GQfHDI9AOIaNCxgqIXJo:eZikJOkdNxLTPqjO1qyifjSF2PFM9g0
- TLSH T1F8761860FACF14F6D9031D3015ABA23F27315D098B28DBD7EA447F29E93B6A6183611D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_1be92670fd5caf74ea04e24e3c5ab25c_glassworm_poet-rat_qnapcrypt_vshell
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_1be92670fd5caf74ea04e24e3c5ab25c_glassworm_poet-rat_qnapcrypt_vshell
- Size 7.2MB
- SHA256 53afacf4268dee89fd853515baa66b4a7ad65a16b75cecc1e2a909ecc34debfe
- MD5 1be92670fd5caf74ea04e24e3c5ab25c
- SHA1 232f4a9d1136be65724ed4da98eaee02d6dac321
- SHA512 80641f4d0094fa6fad1e8280358aec45721c0942fb32d26dca61a790bdb356dac59abcdc908eaad22d1f7a44c338bce7dfc1d42495e5a439470448f5d0fa178c
- SSDEEP 49152:eZSIA2Jd2OzFnOkKUZGSdGqpY2nTbgQqjjXe7H14TyP6GQfHDI9AOIaNCxgqIXJo:eZikJOkdNxLTPqjO1qyifjSF2PFM9g0
- TLSH T1F8761860FACF14F6D9031D3015ABA23F27315D098B28DBD7EA447F29E93B6A6183611D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.