peass | b942e68eae18367f082c6e2a3368c96cd10e48d951b88b34dd758881427af202

General

Target
2026-06-07_318ea6b9f3fb66e82ee5944d828f6d24_darkgate_glassworm_hijackloader_icedid
Size 10.6MB
Sample260607-hsp3fsbv3s
SHA256 b942e68eae18367f082c6e2a3368c96cd10e48d951b88b34dd758881427af202
MD5 318ea6b9f3fb66e82ee5944d828f6d24
SHA1 2d155caa11254dd5a7324a825ccf61554b81624c
SHA512 91a418cf8a96f0967b8817dc3c6e7cbfb3b9d6010b123a0b61dde39a873c89e9573d631d64614883f0c939a96242819a88d9a1b6c3be0bf84895daff8fbd7d9b
SSDEEP 196608:pkJdVBFUcwti7TQlyVN8iNISRTRmW5QK:pQpHwtQQlyXOOQ
TLSH
T122B6D004A2D9092AD5AF0E7D9062123357397716139A8BCBFBCC82981F53FE6C776316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-06-07_318ea6b9f3fb66e82ee5944d828f6d24_darkgate_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 b942e68eae18367f082c6e2a3368c96cd10e48d951b88b34dd758881427af202
- MD5 318ea6b9f3fb66e82ee5944d828f6d24
- SHA1 2d155caa11254dd5a7324a825ccf61554b81624c
- SHA512 91a418cf8a96f0967b8817dc3c6e7cbfb3b9d6010b123a0b61dde39a873c89e9573d631d64614883f0c939a96242819a88d9a1b6c3be0bf84895daff8fbd7d9b
- SSDEEP 196608:pkJdVBFUcwti7TQlyVN8iNISRTRmW5QK:pQpHwtQQlyXOOQ
- TLSH
  T122B6D004A2D9092AD5AF0E7D9062123357397716139A8BCBFBCC82981F53FE6C776316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2