8e81ef73db7f3638c4ea978199d223f25b8e7ff3874b5d9d7b3ef30c52062cef

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23/10/2026, 14:11

Target
2026-10-23_27953d27ea0deb78cb935b251624be84_dosia_glassworm_poet-rat_qnapcrypt
Size 5.8MB
Sample261023-rhbazset7m
SHA256 8e81ef73db7f3638c4ea978199d223f25b8e7ff3874b5d9d7b3ef30c52062cef
MD5 27953d27ea0deb78cb935b251624be84
SHA1 07bfdf4a718729cb00822c56b0ca9e963289a22f
SHA512 33e2a2ed5f2b4dd507b6c334911f37b937861ac91d024db002ca544ffa25746fa6231beb10203f23279a32be8da1b2cbe5a60708d83d52e9636f02986560cba0
SSDEEP 49152:IJ+2CQJmag8cubVDs4MoH+/cIdLeU8vQU5TlhDMTe/iSPVpQ1xG8xhsxdjruPKO7:I8y489+1y4MlpMTqo1xGWxVwEb
TLSH
T1F7564B13EC9555E9C0AEA2308A729253BB717C485B3163D73F60F3686F72BC06AB9354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-10-23_27953d27ea0deb78cb935b251624be84_dosia_glassworm_poet-rat_qnapcrypt

/tmp/2026-10-23_27953d27ea0deb78cb935b251624be84_dosia_glassworm_poet-rat_qnapcrypt
/tmp/2026-10-23_27953d27ea0deb78cb935b251624be84_dosia_glassworm_poet-rat_qnapcrypt
1⤵
- Enumerates kernel/hardware configuration
PID:1508

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact