peass | 7469c2f40e8be498f748b7687a77364b6a435cba66e15479e0eb1dc5430bcb94

General

Target
2026-03-30_b4e1f2091455956f9d8a53b98c8c7232_darkgate_elex_glassworm_hijackloader_icedid
Size 10.6MB
Sample260330-2tpb4aaw6n
SHA256 7469c2f40e8be498f748b7687a77364b6a435cba66e15479e0eb1dc5430bcb94
MD5 b4e1f2091455956f9d8a53b98c8c7232
SHA1 90424ee63e0f833cb6cd155f5475208d25cd5ee9
SHA512 f55b2219f1a5480795db4a8911dcfcf7c209b76343e1bffb91f51386aaf32839fdb916e52205b0ce296edd073d07fabc88b863e6c9d0067be8b949b2f91c3123
SSDEEP 196608:3vyxUb9VBFUcwti7TQlyVN8iNISRTRmW5QN:acJHwtQQlyXOOQ
TLSH
T133B6D044A2D90929D5AF4E3D806212335739760A53DA8BCBFBCC82980F57FE6C776316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-03-30_b4e1f2091455956f9d8a53b98c8c7232_darkgate_elex_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 7469c2f40e8be498f748b7687a77364b6a435cba66e15479e0eb1dc5430bcb94
- MD5 b4e1f2091455956f9d8a53b98c8c7232
- SHA1 90424ee63e0f833cb6cd155f5475208d25cd5ee9
- SHA512 f55b2219f1a5480795db4a8911dcfcf7c209b76343e1bffb91f51386aaf32839fdb916e52205b0ce296edd073d07fabc88b863e6c9d0067be8b949b2f91c3123
- SSDEEP 196608:3vyxUb9VBFUcwti7TQlyVN8iNISRTRmW5QN:acJHwtQQlyXOOQ
- TLSH
  T133B6D044A2D90929D5AF4E3D806212335739760A53DA8BCBFBCC82980F57FE6C776316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Peass family
  peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2