peass | 6b845d2c5208a9620774623d882ee4c098184fc07095c9ff0470e5614926907b

General

Target
2026-10-11_c262c1354473e95c61b106ee00a9e1b3_darkgate_elex_glassworm_hijackloader_icedid
Size 10.8MB
Sample261012-nfnazsce45
SHA256 6b845d2c5208a9620774623d882ee4c098184fc07095c9ff0470e5614926907b
MD5 c262c1354473e95c61b106ee00a9e1b3
SHA1 4efe554a01512505fd31ed91618c15f86d909bd6
SHA512 86e13555aef08f8c84e08c6835d6ec250f9e0fc57288b991ebb744964d0e852b1d7ffe52617e5f94185a2c831d033384d878864dcbd14dfcd31361cc8be03c3f
SSDEEP 196608:tDdpIi8VBFUcwti7TQlyVN8iNISRTRmW5QOj:3pUHwtQQlyXOOQ
TLSH
T1D6B6D004A2E8093DD5EB0E3D90A212235B357716579A8BCBFB8C81581F57FE2CB76316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-10-11_c262c1354473e95c61b106ee00a9e1b3_darkgate_elex_glassworm_hijackloader_icedid
- Size 10.8MB
- SHA256 6b845d2c5208a9620774623d882ee4c098184fc07095c9ff0470e5614926907b
- MD5 c262c1354473e95c61b106ee00a9e1b3
- SHA1 4efe554a01512505fd31ed91618c15f86d909bd6
- SHA512 86e13555aef08f8c84e08c6835d6ec250f9e0fc57288b991ebb744964d0e852b1d7ffe52617e5f94185a2c831d033384d878864dcbd14dfcd31361cc8be03c3f
- SSDEEP 196608:tDdpIi8VBFUcwti7TQlyVN8iNISRTRmW5QOj:3pUHwtQQlyXOOQ
- TLSH
  T1D6B6D004A2E8093DD5EB0E3D90A212235B357716579A8BCBFB8C81581F57FE2CB76316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery peass hacktool persistence privilege_escalation ransomware spyware stealer trojan
- Detects PEASS hacktool
- Family: PEASS, PEASS-ng, Peas
  PEASS is an open-source tool for privilege escalation.
  hacktool peass
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables manipulated with Fody
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2