peass | 23ccb45bb107f390f1eee74e1b02e8b9327f009e86e83200870ba3e6a92766fb

General

Target
2026-09-07_582684a6f8a1c30dae3533dc1ab78000_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
Size 10.6MB
Sample260909-bl8snazxdv
SHA256 23ccb45bb107f390f1eee74e1b02e8b9327f009e86e83200870ba3e6a92766fb
MD5 582684a6f8a1c30dae3533dc1ab78000
SHA1 1818910a1902db0e89601928987fab49cbf38188
SHA512 c957852f50ee61f5669545c442ddb0f0d87486c2eff6505ed8781bd8d0755e039363c10e0717d6d5e4f134abf11204e1f376fc5aedadb442c512007c16a3eeb5
SSDEEP 196608:DeUZ86VBFUcwti7TQlyVN8iNISRTRmW5QSHQ:zuGHwtQQlyXOOQSH
TLSH
T1EFB6D044A2ED0929D5AB0E3D90A2023357357706139A8BCBFBCC81981F57FE6CB76716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-07_582684a6f8a1c30dae3533dc1ab78000_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.6MB
- SHA256 23ccb45bb107f390f1eee74e1b02e8b9327f009e86e83200870ba3e6a92766fb
- MD5 582684a6f8a1c30dae3533dc1ab78000
- SHA1 1818910a1902db0e89601928987fab49cbf38188
- SHA512 c957852f50ee61f5669545c442ddb0f0d87486c2eff6505ed8781bd8d0755e039363c10e0717d6d5e4f134abf11204e1f376fc5aedadb442c512007c16a3eeb5
- SSDEEP 196608:DeUZ86VBFUcwti7TQlyVN8iNISRTRmW5QSHQ:zuGHwtQQlyXOOQSH
- TLSH
  T1EFB6D044A2ED0929D5AB0E3D90A2023357357706139A8BCBFBCC81981F57FE6CB76716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool spyware stealer trojan persistence privilege_escalation
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2