peass | 296d5381eceda59ed9a38891a059e991fed24c81b918fd8bf3760bd9b7d677ff

General

Target
2026-05-31_e988d8c4e1078eab6d85d2e7619850dd_darkgate_elex_glassworm_hijackloader_icedid_silence
Size 10.5MB
Sample260531-n4w8ssf131
SHA256 296d5381eceda59ed9a38891a059e991fed24c81b918fd8bf3760bd9b7d677ff
MD5 e988d8c4e1078eab6d85d2e7619850dd
SHA1 0c3a669d446a63a953ccbeba399386bd71128018
SHA512 7350aeed42841a8f2106e337abb3b5e275d5ce9e9c5f12c263bace57e0b441b3c762dd067375a8653ff08365c2cfb447616affc52c5dc3d3329648a55e644ce9
SSDEEP 196608:qfnjZVBFUcwti7TQlyVN8iNISRTRmW5QV:0ZHwtQQlyXOOQ
TLSH
T122B6D000A2ED0469D6AF1E79906202324B35761A579A8BC7F7CC81AC0F57FE1DF76326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-31_e988d8c4e1078eab6d85d2e7619850dd_darkgate_elex_glassworm_hijackloader_icedid_silence
- Size 10.5MB
- SHA256 296d5381eceda59ed9a38891a059e991fed24c81b918fd8bf3760bd9b7d677ff
- MD5 e988d8c4e1078eab6d85d2e7619850dd
- SHA1 0c3a669d446a63a953ccbeba399386bd71128018
- SHA512 7350aeed42841a8f2106e337abb3b5e275d5ce9e9c5f12c263bace57e0b441b3c762dd067375a8653ff08365c2cfb447616affc52c5dc3d3329648a55e644ce9
- SSDEEP 196608:qfnjZVBFUcwti7TQlyVN8iNISRTRmW5QV:0ZHwtQQlyXOOQ
- TLSH
  T122B6D000A2ED0469D6AF1E79906202324B35761A579A8BC7F7CC81AC0F57FE1DF76326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables packed with Dotfuscator
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2