General
- Target 2026-10-03_174b79d28f01b3d033457cb2f7fcce3b_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.8MB
- Sample261004-wbdvratdka
- SHA256 51287c7ae6b16c71480a1e93c7568f339c34adbdf1c1345a42398e85161151db
Score
10/10
Malware Config
Targets
-
- Target 2026-10-03_174b79d28f01b3d033457cb2f7fcce3b_darkgate_elex_glassworm_hijackloader_icedid_quasar-rat
- Size 10.8MB
- SHA256 51287c7ae6b16c71480a1e93c7568f339c34adbdf1c1345a42398e85161151db
Score10/10-
Detects PEASS hacktool
-
Family: PEASS, PEASS-ng, Peas
PEASS is an open-source tool for privilege escalation.
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables manipulated with Fody
-
Detects executables referencing Windows vault credential objects. Observed in infostealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Wi-Fi Discovery
1