8cff61851cce7b2386729465757a9ad472f96be09fa4b212d69dee18d164348f

Analysis

max time kernel
149s
max time network
149s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13/11/2026, 06:05

Target
2026-11-12_2e99019e0b0ae77104c616f4ad8b4de5_glassworm_poet-rat_qnapcrypt_vshell
Size 7.2MB
Sample261113-gtgl2ags21
SHA256 8cff61851cce7b2386729465757a9ad472f96be09fa4b212d69dee18d164348f
MD5 2e99019e0b0ae77104c616f4ad8b4de5
SHA1 5433cf105df0610b34c23f0c7960cc3431479235
SHA512 69c73d39bdb45cf0750a48a72c0e8ca6666012bc30c7df3b0503bec059575aa1902ec877db25eec3e74b28d0923812bd5e9b7ef37c3eed99127527f1506a7296
SSDEEP 49152:eZSIA2Jd2OzFnOkKUZGSdGqpY2nTbgQqjjXe7H14TyP6GQfHDI9AOIaNCxgqIXJW:eZikJOkdNxLTPqjO1qyifjSF2PFC9g0
TLSH
T1B3761860FACF14F6D9031D3015ABA23F27315D098B28DBD7EA447F29E93B6A6183611D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2026-11-12_2e99019e0b0ae77104c616f4ad8b4de5_glassworm_poet-rat_qnapcrypt_vshell

/tmp/2026-11-12_2e99019e0b0ae77104c616f4ad8b4de5_glassworm_poet-rat_qnapcrypt_vshell
/tmp/2026-11-12_2e99019e0b0ae77104c616f4ad8b4de5_glassworm_poet-rat_qnapcrypt_vshell
1⤵
- Enumerates kernel/hardware configuration
PID:1571

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact