Overview

overview

8

Static

static

idman639build2.exe

windows7-x64

8

idman639build2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    idman639build2.exe

  • Size

    10.1MB

  • Sample

    221230-3kk4ragg87

  • MD5

    32d11c996b67786686172b4179c6ee46

  • SHA1

    d99662924b9d260872bba995b233332ee0eab748

  • SHA256

    1d364c185082bf798f4ff21f33b63c84cc1407ca33be17793990190b59d2042c

  • SHA512

    5dd02bf6a325befea5ce450b453376bee609b03df562fafdf6603b9e6c84e534e5d13b42aaacf0a99f0ffdc767d529c63fd073c6cf76e193f6268fb54ce8276b

  • SSDEEP

    196608:Tsll5pqSg5rspViQUMWPNPFZYCpuUlI5H2rj8fBgnZxWdChHD2pe:TYTw5spVFtQPFZYjuISjmsZnKp

Score
8/10
discovery

Malware Config

Targets

    • Target

      idman639build2.exe

    • Size

      10.1MB

    • MD5

      32d11c996b67786686172b4179c6ee46

    • SHA1

      d99662924b9d260872bba995b233332ee0eab748

    • SHA256

      1d364c185082bf798f4ff21f33b63c84cc1407ca33be17793990190b59d2042c

    • SHA512

      5dd02bf6a325befea5ce450b453376bee609b03df562fafdf6603b9e6c84e534e5d13b42aaacf0a99f0ffdc767d529c63fd073c6cf76e193f6268fb54ce8276b

    • SSDEEP

      196608:Tsll5pqSg5rspViQUMWPNPFZYCpuUlI5H2rj8fBgnZxWdChHD2pe:TYTw5spVFtQPFZYjuISjmsZnKp

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks