peass | 59011205a2a2fd4fa63aa22d9a6125b221b863f81229d16a6d110cb849365236

General

Target
2026-09-11_0eb5a58b39668a4f4648318ae8f22a9d_darkgate_glassworm_hijackloader_icedid
Size 10.7MB
Sample260912-ajfteshe43
SHA256 59011205a2a2fd4fa63aa22d9a6125b221b863f81229d16a6d110cb849365236
MD5 0eb5a58b39668a4f4648318ae8f22a9d
SHA1 35472005f2e09bc00bf78b41c828d221e1da80f6
SHA512 bdc922dbdd6faeb29aed2079e185f420005e94b9cbec00a040009e1a485653c54cca9f6d43c5dd6f6325db84b16688daa0310d89a19c25a783baa948dc443d63
SSDEEP 196608:Dln+fIirVBFUcwti7TQlyVN8iNISRTRmW5Qy:h+fDHwtQQlyXOOQ
TLSH
T1D6B6D004A2E8092DD5EB0E3D906202335B39770A579A8BCBBBCC81581F57FE2D776716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-11_0eb5a58b39668a4f4648318ae8f22a9d_darkgate_glassworm_hijackloader_icedid
- Size 10.7MB
- SHA256 59011205a2a2fd4fa63aa22d9a6125b221b863f81229d16a6d110cb849365236
- MD5 0eb5a58b39668a4f4648318ae8f22a9d
- SHA1 35472005f2e09bc00bf78b41c828d221e1da80f6
- SHA512 bdc922dbdd6faeb29aed2079e185f420005e94b9cbec00a040009e1a485653c54cca9f6d43c5dd6f6325db84b16688daa0310d89a19c25a783baa948dc443d63
- SSDEEP 196608:Dln+fIirVBFUcwti7TQlyVN8iNISRTRmW5Qy:h+fDHwtQQlyXOOQ
- TLSH
  T1D6B6D004A2E8092DD5EB0E3D906202335B39770A579A8BCBBBCC81581F57FE2D776716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation ransomware spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2