2026-09-24_02730ec523e55cb35cb6a62e320f107b_glassworm_poet-rat_qnapcrypt

General

Target
2026-09-24_02730ec523e55cb35cb6a62e320f107b_glassworm_poet-rat_qnapcrypt
Size 7.2MB
Sample260925-tglrfafd87
SHA256 0b4b099960d2ba8813e3e3a628c896761ed50473bf334ce668238083f2846a30
MD5 02730ec523e55cb35cb6a62e320f107b
SHA1 4ec3180a261fca839443d11b77374e8ec3e7dbc8
SHA512 38ddcf6072df590ac5118404563e0c48daa81c5537bd0e32685cd1bc9fcc011cb802cddf64e664b5693b403b8045e8c5a9e26bba85da98b2a769cd003467549a
SSDEEP 98304:/AMSAKZzSNBewrc+cgxgH7CO7kFFrZnjbEonT2:/wzNsXcgxgHuM+NnHR2
TLSH
T19D768C41FECB04F6E9071A3054BFA27F53315D0A4B24EBC7EA14BF2AE97B6911936118
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

2026-09-24_02730ec523e55cb35cb6a62e320f107b_glassworm_poet-rat_qnapcrypt

.elf 7.2MB

SHA256 0b4b099960d2ba8813e3e3a628c896761ed50473bf334ce668238083f2846a30
MD5 02730ec523e55cb35cb6a62e320f107b
SHA1 4ec3180a261fca839443d11b77374e8ec3e7dbc8
SHA512 38ddcf6072df590ac5118404563e0c48daa81c5537bd0e32685cd1bc9fcc011cb802cddf64e664b5693b403b8045e8c5a9e26bba85da98b2a769cd003467549a
SSDEEP 98304:/AMSAKZzSNBewrc+cgxgH7CO7kFFrZnjbEonT2:/wzNsXcgxgHuM+NnHR2
TLSH
T19D768C41FECB04F6E9071A3054BFA27F53315D0A4B24EBC7EA14BF2AE97B6911936118
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx