peass | 4db244f2f9b6910d28b349180c012ed18db18b33844f66bfbe1900eee9150c33

General

Target
2026-07-31_dc3a7b167135a68057648d0b7be54ff9_darkgate_glassworm_hijackloader_icedid
Size 10.6MB
Sample260731-qvtsestgjd
SHA256 4db244f2f9b6910d28b349180c012ed18db18b33844f66bfbe1900eee9150c33
MD5 dc3a7b167135a68057648d0b7be54ff9
SHA1 f5f9521a4dc358927e944ef07fbf958d417296f7
SHA512 44e7635d8c7afc25811861f6b8c6003f73c19cb5158be85072fac2f4f69a83ef9f0b3164806d366157cb6c497e4359b67c4bd6aaf2806437f83f98682520e5c4
SSDEEP 196608:Of5TiIVBFUcwti7TQlyVN8iNISRTRmW5Q+HtM:EmQHwtQQlyXOOQ+Ht
TLSH
T181B6D044A2ED0929D6AB0E3D9062023317397706139A8BCBFBCC81581F57FE6D776726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-31_dc3a7b167135a68057648d0b7be54ff9_darkgate_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 4db244f2f9b6910d28b349180c012ed18db18b33844f66bfbe1900eee9150c33
- MD5 dc3a7b167135a68057648d0b7be54ff9
- SHA1 f5f9521a4dc358927e944ef07fbf958d417296f7
- SHA512 44e7635d8c7afc25811861f6b8c6003f73c19cb5158be85072fac2f4f69a83ef9f0b3164806d366157cb6c497e4359b67c4bd6aaf2806437f83f98682520e5c4
- SSDEEP 196608:Of5TiIVBFUcwti7TQlyVN8iNISRTRmW5Q+HtM:EmQHwtQQlyXOOQ+Ht
- TLSH
  T181B6D044A2ED0929D6AB0E3D9062023317397706139A8BCBFBCC81581F57FE6D776726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2