General
- Target IDMan.exe
- Size 5.7MB
- Sample240601-kh45qsgd77
- SHA256 4844e0e0de7ef5b004bc051d9a3a59b3ccb1e05abadb8e35a43314a1d5ce1d27
- MD5 c63282dcd9262fe365d0047b60bede8c
- SHA1 8c3db4811962cc0b88a00ff07cc3f87a3e81d390
- SHA512 10e05559633d26f52b1d9481321b6585c93578fbffa0bbad426791f8148edbd67d02b2f166c74154192c7b11b426f00c7ee7b372ef5578512b81e4fb4737fff3
- SSDEEP 98304:wnNfMJBeiJ9a3N8rP4j18frP3wbzWFimaI7dlo:gOBeiJ9adygbzWFimaI7dl
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IDMan.exe
Resource
win7-20240221-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target IDMan.exe
- Size 5.7MB
- SHA256 4844e0e0de7ef5b004bc051d9a3a59b3ccb1e05abadb8e35a43314a1d5ce1d27
- MD5 c63282dcd9262fe365d0047b60bede8c
- SHA1 8c3db4811962cc0b88a00ff07cc3f87a3e81d390
- SHA512 10e05559633d26f52b1d9481321b6585c93578fbffa0bbad426791f8148edbd67d02b2f166c74154192c7b11b426f00c7ee7b372ef5578512b81e4fb4737fff3
- SSDEEP 98304:wnNfMJBeiJ9a3N8rP4j18frP3wbzWFimaI7dlo:gOBeiJ9adygbzWFimaI7dl
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Adds Run key to start application