General
- Target 2026-08-25_66555abd5f6529e20fb03b2743f177c6_qnapcrypt
- Size 11.8MB
- Sample260826-21d5psxere
- SHA256 22ef852f6ebc39ee71235b90648b4b200b385c47d25c79545986493f8c70db69
- MD5 66555abd5f6529e20fb03b2743f177c6
- SHA1 93eac8c351d4890644ca969d30792a8800b22c1d
- SHA512 6a52017ad0be25c846cd7b33e23f84918f8266e34e7c5dced57f4767f08da194530fcdfb5f1cdf73f7cc1057bdefd6328c41a412fc568b9103b3f70cb5e8b307
- SSDEEP 98304:4E6QVCIAIB13cAu6+fnLSeGsZ2hnLJ6Bn/8JzC/ypG8MT2Q1R1reo+/8432lbAnO:4Io7q13N8HGsun16Bn/8JzfADFR88ezG
- TLSH T140C65843E4B71EA1D2AC377B0A1343A3E4126C274AD117B36D4D62BD0AF6B81479D2E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-25_66555abd5f6529e20fb03b2743f177c6_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_66555abd5f6529e20fb03b2743f177c6_qnapcrypt
- Size 11.8MB
- SHA256 22ef852f6ebc39ee71235b90648b4b200b385c47d25c79545986493f8c70db69
- MD5 66555abd5f6529e20fb03b2743f177c6
- SHA1 93eac8c351d4890644ca969d30792a8800b22c1d
- SHA512 6a52017ad0be25c846cd7b33e23f84918f8266e34e7c5dced57f4767f08da194530fcdfb5f1cdf73f7cc1057bdefd6328c41a412fc568b9103b3f70cb5e8b307
- SSDEEP 98304:4E6QVCIAIB13cAu6+fnLSeGsZ2hnLJ6Bn/8JzC/ypG8MT2Q1R1reo+/8432lbAnO:4Io7q13N8HGsun16Bn/8JzfADFR88ezG
- TLSH T140C65843E4B71EA1D2AC377B0A1343A3E4126C274AD117B36D4D62BD0AF6B81479D2E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Runs EXE from memory
Runs an executable from memory, likely to minimize footprint
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1