peass | 535fb14dae1ce3752745125f771eea6938e89eaf3c50ec86a3806715b0200121

General

Target
2026-06-01_66ea03ea318a1d56c04544d62627fa7e_darkgate_glassworm_hijackloader_icedid
Size 10.6MB
Sample260601-qtk4wsfx9p
SHA256 535fb14dae1ce3752745125f771eea6938e89eaf3c50ec86a3806715b0200121
MD5 66ea03ea318a1d56c04544d62627fa7e
SHA1 5df3b8288b7a0750fe52aad1859335799957dfc0
SHA512 0798e5e6f57ab8abe0fe56cb4ab9eab0b8ab4eb7b4b11574d4de9301f94d9231232186f690adb836e32c8c742e214cff199789ad7d220aebc0efe8a76d4802d2
SSDEEP 196608:bPzrVBFUcwti7TQlyVN8iNISRTRmW5QD:bLrHwtQQlyXOOQ
TLSH
T1ABB6D000A2D90929D5AF0E7D9062123357397716539A8BCBFBCC82980F57FE6CB76316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-06-01_66ea03ea318a1d56c04544d62627fa7e_darkgate_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 535fb14dae1ce3752745125f771eea6938e89eaf3c50ec86a3806715b0200121
- MD5 66ea03ea318a1d56c04544d62627fa7e
- SHA1 5df3b8288b7a0750fe52aad1859335799957dfc0
- SHA512 0798e5e6f57ab8abe0fe56cb4ab9eab0b8ab4eb7b4b11574d4de9301f94d9231232186f690adb836e32c8c742e214cff199789ad7d220aebc0efe8a76d4802d2
- SSDEEP 196608:bPzrVBFUcwti7TQlyVN8iNISRTRmW5QD:bLrHwtQQlyXOOQ
- TLSH
  T1ABB6D000A2D90929D5AF0E7D9062123357397716539A8BCBFBCC82980F57FE6CB76316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2