Analysis
- max time kernel
0s - max time network
130s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
24/09/2026, 04:48
Behavioral task
behavioral1
Sample
2026-09-23_aace813393f895fd5fa9e4a0a3735781_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target 2026-09-23_aace813393f895fd5fa9e4a0a3735781_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell
- Size 7.5MB
- Sample260924-ffbm7aeb97
- SHA256 7e7e2cd326b50539d40aee74b2093dc82f813708c5190a12d9df4ccd0cb2c118
- MD5 aace813393f895fd5fa9e4a0a3735781
- SHA1 b891f145655eb9682a1add2f8d095fabdc88b802
- SHA512 b3628eda9c829e827aaf30c7c26172690ba306409e6b4a8b92538972fc5a7f056200f4849c0e93d0af91ff11403d50fc5c164deb552e5eb88144714b3882cfe3
- SSDEEP 49152:sRm6tkO15VlRArb/TivO90d7HjmAFd4A64nsfJIyMVmbfugZjs38LVBiz6LbtPXr:glRJXp8L/KyZcCb7AEew+k
- TLSH T1A8862847F89041E8C0EED174CA669263BA707C895B3063D72B50F7B82F72BD46A7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 2026-09-23_aace813393f895fd5fa9e4a0a3735781_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell -
description ioc Process File opened for reading /proc/sys/net/core/somaxconn 2026-09-23_aace813393f895fd5fa9e4a0a3735781_dosia_glassworm_poet-rat_qnapcrypt_sliver_vshell