peass | 4e40fd81b9c4551d815601fcc0d459c2cea97af4992abed932ad9306aeac3288

General

Target
2026-05-20_b6adecbd2caa2f1b7cb5e8d676ec4be7_darkgate_elex_glassworm_hijackloader_icedid
Size 10.6MB
Sample260520-mk249sbs6t
SHA256 4e40fd81b9c4551d815601fcc0d459c2cea97af4992abed932ad9306aeac3288
MD5 b6adecbd2caa2f1b7cb5e8d676ec4be7
SHA1 c5ca40e99aaac4aa1f6be4af5bf18885bb785505
SHA512 ad9a8167d8c26616b5557254858839f25e6537c35794453efea3f106a6660b731de87c5b06417fa84890c07a823fd8c868a45026b6386104db83ec750b4162ce
SSDEEP 196608:K7syFv3VBFUcwti7TQlyVN8iNISRTRmW5Qf:9afHwtQQlyXOOQ
TLSH
T132B6D004A2D9092AD5AF4E3D906112335739771A539A8BCBFBCC82980F53FE2D776316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-20_b6adecbd2caa2f1b7cb5e8d676ec4be7_darkgate_elex_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 4e40fd81b9c4551d815601fcc0d459c2cea97af4992abed932ad9306aeac3288
- MD5 b6adecbd2caa2f1b7cb5e8d676ec4be7
- SHA1 c5ca40e99aaac4aa1f6be4af5bf18885bb785505
- SHA512 ad9a8167d8c26616b5557254858839f25e6537c35794453efea3f106a6660b731de87c5b06417fa84890c07a823fd8c868a45026b6386104db83ec750b4162ce
- SSDEEP 196608:K7syFv3VBFUcwti7TQlyVN8iNISRTRmW5Qf:9afHwtQQlyXOOQ
- TLSH
  T132B6D004A2D9092AD5AF4E3D906112335739771A539A8BCBFBCC82980F53FE2D776316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2