01ac7d1fd5ed75b74c653d3a72222f7787de620ad77f6822d76018c1e5e8cbd4

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17/10/2026, 15:19

Target
2026-10-16_6b9ad744857d55bcf464251762526fe6_glassworm_poet-rat_qnapcrypt
Size 24.4MB
Sample261017-sqgcmsg12p
SHA256 01ac7d1fd5ed75b74c653d3a72222f7787de620ad77f6822d76018c1e5e8cbd4
MD5 6b9ad744857d55bcf464251762526fe6
SHA1 e52aeb01082e6abad6d96ab82231d318a6dd4c61
SHA512 26756134aec67bb721c8a7cd24c0e972807a5abbcff8da22bcf1f165e478e52edd46747c3f700358360cf29153963cbe6f6d2161f95be54e4c9544e3be8b5939
SSDEEP 196608:MxrBB5+Znui+eJocAzEl3Ibvyw00ts7kxPU1/pRENyvjTGLbf5XyQAvxUk4Tc4SV:MNB0nu66cYvP0On5hYUxRSJZ2DzyPn
TLSH
T131476D13F89615E6C6FEE0308692D226BEB17895873177D36FE09A661636FD07A3D300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-10-16_6b9ad744857d55bcf464251762526fe6_glassworm_poet-rat_qnapcrypt

/tmp/2026-10-16_6b9ad744857d55bcf464251762526fe6_glassworm_poet-rat_qnapcrypt
/tmp/2026-10-16_6b9ad744857d55bcf464251762526fe6_glassworm_poet-rat_qnapcrypt
1⤵
- Enumerates kernel/hardware configuration
PID:1492

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact