peass | 0fcefba867143acf352cf7926f4be9f183e989b17ad690eda201a18fd9fa488e

General

Target
2026-09-07_3859de5c86622ec84dfb50d2dc7ffa31_darkgate_elex_glassworm_hijackloader_icedid
Size 10.6MB
Sample260909-d642ba1dnb
SHA256 0fcefba867143acf352cf7926f4be9f183e989b17ad690eda201a18fd9fa488e
MD5 3859de5c86622ec84dfb50d2dc7ffa31
SHA1 c9dbec0f0590e2b4baa22828bd95ed4bc37d9344
SHA512 e165c8eba0055e1ab9f7eebbf0497d17b0ee4f4d088922ba4e4e40673808bcba7c0d049e7dbb4e49f820eba1e1cf291b34a0e107e0105b816cb0ee08d0193e2b
SSDEEP 196608:0eUZ86VBFUcwti7TQlyVN8iNISRTRmW5QSHQ:8uGHwtQQlyXOOQSH
TLSH
T128B6D044A2ED0929D5AB0E3D90A2023357357706139A8BCBFBCC81981F57FE6CB76716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-07_3859de5c86622ec84dfb50d2dc7ffa31_darkgate_elex_glassworm_hijackloader_icedid
- Size 10.6MB
- SHA256 0fcefba867143acf352cf7926f4be9f183e989b17ad690eda201a18fd9fa488e
- MD5 3859de5c86622ec84dfb50d2dc7ffa31
- SHA1 c9dbec0f0590e2b4baa22828bd95ed4bc37d9344
- SHA512 e165c8eba0055e1ab9f7eebbf0497d17b0ee4f4d088922ba4e4e40673808bcba7c0d049e7dbb4e49f820eba1e1cf291b34a0e107e0105b816cb0ee08d0193e2b
- SSDEEP 196608:0eUZ86VBFUcwti7TQlyVN8iNISRTRmW5QSHQ:8uGHwtQQlyXOOQSH
- TLSH
  T128B6D044A2ED0929D5AB0E3D90A2023357357706139A8BCBFBCC81981F57FE6CB76716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2