83e630fc532553ffc7693c99beb6fc71fb1430522aa3004dc3d7094c687ce154 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

2026-09-22...t_zxxz

ubuntu-18.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-22_f1fe7867722eb218a53016950e4d4522_dosia_glassworm_poet-rat_qnapcrypt_zxxz
Size 5.6MB
Sample260922-tv5fpsydrh
SHA256 83e630fc532553ffc7693c99beb6fc71fb1430522aa3004dc3d7094c687ce154
MD5 f1fe7867722eb218a53016950e4d4522
SHA1 5e585e32be31f851151c2e7434efbab358710baa
SHA512 b9755cf5ad1610faf26eaf116f3428d7da122deffebab266177852134fd0f171c362af848dd43befd8525f65760162c721696be50739fea5bc6ad04cdcb81803
SSDEEP 49152:xM0MFBnHLe6tnYAAViKXsvd/XrvqKI25xT0kbSnL4BT25Ek:uPFpLdtnAVi/xXrv1I25CFEk
TLSH
T1DA462850FECB54F6E903193145ABA26F63315C058F25EBE7EA447F2AF937A91093220D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution linux persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

2026-09-22_f1fe7867722eb218a53016950e4d4522_dosia_glassworm_poet-rat_qnapcrypt_zxxz

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

150 seconds

discovery execution persistence privilege_escalation

Malware Config

Targets

- Target
  2026-09-22_f1fe7867722eb218a53016950e4d4522_dosia_glassworm_poet-rat_qnapcrypt_zxxz
- Size 5.6MB
- SHA256 83e630fc532553ffc7693c99beb6fc71fb1430522aa3004dc3d7094c687ce154
- MD5 f1fe7867722eb218a53016950e4d4522
- SHA1 5e585e32be31f851151c2e7434efbab358710baa
- SHA512 b9755cf5ad1610faf26eaf116f3428d7da122deffebab266177852134fd0f171c362af848dd43befd8525f65760162c721696be50739fea5bc6ad04cdcb81803
- SSDEEP 49152:xM0MFBnHLe6tnYAAViKXsvd/XrvqKI25xT0kbSnL4BT25Ek:uPFpLdtnAVi/xXrv1I25CFEk
- TLSH
  T1DA462850FECB54F6E903193145ABA26F63315C058F25EBE7EA447F2AF937A91093220D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution persistence privilege_escalation
- Creates/modifies Cron job
  Cron allows running tasks on a schedule, and is commonly used for malware persistence.
  execution persistence privilege_escalation
- Modifies init.d
  Adds/modifies system service, likely for persistence.
  persistence
- Modifies systemd
  Adds/ modifies systemd service files. Likely to achieve persistence.
  persistence privilege_escalation
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Cron

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

Boot or Logon Initialization Scripts

RC Scripts

Create or Modify System Process

Systemd Service

Scheduled Task/Job

Cron

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

Boot or Logon Initialization Scripts

RC Scripts

Create or Modify System Process

Systemd Service

Scheduled Task/Job

Cron

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy