Overview

overview

3

Static

static

1

2026-11-09...pcrypt

ubuntu-18.04-amd64

3

Analysis

  • max time kernel
    0s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20261019-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    10/11/2026, 13:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-09_8b3eecebb6a6a5714098c3d46ca87faa_dosia_glassworm_poet-rat_qnapcrypt
  • Size 33.7MB
  • Sample261110-qlpr4sa14s
  • SHA256 853c7af845e9704849241579135c89cd9b32d4bd9f1963d9abe097bbdcb72ec8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 4 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/2026-11-09_8b3eecebb6a6a5714098c3d46ca87faa_dosia_glassworm_poet-rat_qnapcrypt
    /tmp/2026-11-09_8b3eecebb6a6a5714098c3d46ca87faa_dosia_glassworm_poet-rat_qnapcrypt
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    • Writes file to tmp directory
    PID:1523
    • /usr/bin/ldd
      ldd --version
      2⤵
        PID:1531

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          unirtm.db
          • Path /tmp/unirtm_data/unirtm.db
          • Size 4KB
          • SHA256 89a2318c76452be80e1d743f163f3dd96623b2b05604aa06985c6b5501238362
          • MD5 SHA1 SHA512 TLSH
          Submit Download