peass | 16fff066c96cf60e8f1a7ec0df71bb7350c269950f1533a1a8c5cd4d0cc07386

General

Target
2026-06-12_e230693cbed4ec387a25483cbf93ea96_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
Size 10.6MB
Sample260612-sxbezagz2v
SHA256 16fff066c96cf60e8f1a7ec0df71bb7350c269950f1533a1a8c5cd4d0cc07386
MD5 e230693cbed4ec387a25483cbf93ea96
SHA1 299d5f8a715d059f33ea05f62199b0e1606291be
SHA512 53c48beead4b1a61de7f4227ac40ca6efb2c8b780295844e708e27e02d807831e331c5986e3d83ca1c3da01751adb97307f24111c9de1c605d743f99bae297bd
SSDEEP 196608:ruYrVBFUcwti7TQlyVN8iNISRTRmW5QH:rLrHwtQQlyXOOQ
TLSH
T152B6D000A2E90929D5AF0E7D9062123357397716539A8BCBFBCC82581F53FE6C776326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-06-12_e230693cbed4ec387a25483cbf93ea96_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.6MB
- SHA256 16fff066c96cf60e8f1a7ec0df71bb7350c269950f1533a1a8c5cd4d0cc07386
- MD5 e230693cbed4ec387a25483cbf93ea96
- SHA1 299d5f8a715d059f33ea05f62199b0e1606291be
- SHA512 53c48beead4b1a61de7f4227ac40ca6efb2c8b780295844e708e27e02d807831e331c5986e3d83ca1c3da01751adb97307f24111c9de1c605d743f99bae297bd
- SSDEEP 196608:ruYrVBFUcwti7TQlyVN8iNISRTRmW5QH:rLrHwtQQlyXOOQ
- TLSH
  T152B6D000A2E90929D5AF0E7D9062123357397716539A8BCBFBCC82581F53FE6C776326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool spyware stealer trojan persistence privilege_escalation
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2