peass | d995302dc2fd335e616d89934c26cf41a64471dfe1b4d9f3e732111c5db055ab

General

Target
2026-07-08_18432027f299f2dea7f00587decd668f_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
Size 10.6MB
Sample260708-2lmtasa17x
SHA256 d995302dc2fd335e616d89934c26cf41a64471dfe1b4d9f3e732111c5db055ab
MD5 18432027f299f2dea7f00587decd668f
SHA1 c8925833f1cb31647942f091da8018c68f7a55d6
SHA512 adf9e3443a4cd4564de203cacb63c57eb24c84efdb3a1573263e9c03564180dbc019edc0c2f64fb1a621bc9076491ffe9295c9fda3bdc60500418dd48fb2fa4e
SSDEEP 196608:uu6f2VBFUcwti7TQlyVN8iNISRTRmW5QAHz:DMKHwtQQlyXOOQAH
TLSH
T192B6D044A2E90929D6AF0E3D8062023357397706139A8BCBFBCC81581F57FE6D776726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-08_18432027f299f2dea7f00587decd668f_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.6MB
- SHA256 d995302dc2fd335e616d89934c26cf41a64471dfe1b4d9f3e732111c5db055ab
- MD5 18432027f299f2dea7f00587decd668f
- SHA1 c8925833f1cb31647942f091da8018c68f7a55d6
- SHA512 adf9e3443a4cd4564de203cacb63c57eb24c84efdb3a1573263e9c03564180dbc019edc0c2f64fb1a621bc9076491ffe9295c9fda3bdc60500418dd48fb2fa4e
- SSDEEP 196608:uu6f2VBFUcwti7TQlyVN8iNISRTRmW5QAHz:DMKHwtQQlyXOOQAH
- TLSH
  T192B6D044A2E90929D6AF0E3D8062023357397706139A8BCBFBCC81581F57FE6D776726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool spyware stealer trojan persistence privilege_escalation
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2