07aeb5d2f44d7758179060e17659272de1ee99dec0833b2877844ef645aede52

Analysis

max time kernel
149s
max time network
147s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24/10/2026, 12:00

Target
2026-10-22_5c00e19fc682a9c0c0bd3a3dff243ad2_glassworm_poet-rat_qnapcrypt_vshell
Size 7.2MB
Sample261024-n6fc3atzaz
SHA256 07aeb5d2f44d7758179060e17659272de1ee99dec0833b2877844ef645aede52
MD5 5c00e19fc682a9c0c0bd3a3dff243ad2
SHA1 dce544b4ebea10d5455d8bca6f59734111efb1d4
SHA512 a1121a6b832b734611bc38e1a714a6745056c5d1700b0106ed298853e51fd87a00ee802e209f4a8746c05c681202719471d93b9ed01962293d7fab557a5f0ec8
SSDEEP 49152:eZSIA2Jd2OzFnOkKUZGSdGqpY2nTbgQqjjXe7H14TyP6GQfHDI9AOIaNCxgqIXJR:eZikJOkdNxLTPqjO1qyifjSF2PFL9g0
TLSH
T156761860FACF14F6D9031D3015ABA23F27315D098B28DBD7EA447F29E93B6A6183611D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-10-22_5c00e19fc682a9c0c0bd3a3dff243ad2_glassworm_poet-rat_qnapcrypt_vshell

/tmp/2026-10-22_5c00e19fc682a9c0c0bd3a3dff243ad2_glassworm_poet-rat_qnapcrypt_vshell
/tmp/2026-10-22_5c00e19fc682a9c0c0bd3a3dff243ad2_glassworm_poet-rat_qnapcrypt_vshell
1⤵
- Enumerates kernel/hardware configuration
PID:1509

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact