peass | 651c30c4fa43653ad0a120a249eb77df142ee462baaed28071e9bd7140959116

General

Target
2026-08-10_e1f478e416011740458f3a7f1b0ad43c_darkgate_elex_glassworm_hijackloader_icedid_silence
Size 14.2MB
Sample260810-1gbd2aygmh
SHA256 651c30c4fa43653ad0a120a249eb77df142ee462baaed28071e9bd7140959116
MD5 e1f478e416011740458f3a7f1b0ad43c
SHA1 60abe7cef6868cb2f69a79df3f3bc62649e243a1
SHA512 385d5d1a3e78ab801d6a142d8adc144f23a09451444dab07db5f8f79461a2119031ed88b65990a85b4f58f80b99841e8dd3c8a49f5712b4df2dc8674c81b8a55
SSDEEP 196608:X/L/S+FbbzKhvgWvVBFUcwti7TQlyVN8iNISRTRmW5Q3+:X/L/S+Fbb6gWnHwtQQlyXOOQ
TLSH
T123E63942B7988E35D4B5BB3583531922B76A710C5F43C3DF7D8CB3891E06A939D29B28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-10_e1f478e416011740458f3a7f1b0ad43c_darkgate_elex_glassworm_hijackloader_icedid_silence
- Size 14.2MB
- SHA256 651c30c4fa43653ad0a120a249eb77df142ee462baaed28071e9bd7140959116
- MD5 e1f478e416011740458f3a7f1b0ad43c
- SHA1 60abe7cef6868cb2f69a79df3f3bc62649e243a1
- SHA512 385d5d1a3e78ab801d6a142d8adc144f23a09451444dab07db5f8f79461a2119031ed88b65990a85b4f58f80b99841e8dd3c8a49f5712b4df2dc8674c81b8a55
- SSDEEP 196608:X/L/S+FbbzKhvgWvVBFUcwti7TQlyVN8iNISRTRmW5Q3+:X/L/S+Fbb6gWnHwtQQlyXOOQ
- TLSH
  T123E63942B7988E35D4B5BB3583531922B76A710C5F43C3DF7D8CB3891E06A939D29B28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables packed with Dotfuscator
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2