Extracted

Extracted

• • Target
    IDM_6.4x_Crack_v20.6.exe
  • Size 66KB
  • SHA256 bcb21f1b4b14892370d2e935bcdb20feae7ff36d8d7eab8bf24a72ef43b01f89
  • MD5 99e93f400964b6c8bab5a18e0e216500
  • SHA1 2cfa756887ba67240c73791782386bd389a83454
  • SHA512 da8e355bd93692cec82ac59cd899f25112be270fc69b7aac49d4abe7e95428b3ffd9f18ebdc5cfbc196c2fb8290ff5051ebeb639ac56e4cad4762ea437f43af1
  • SSDEEP 1536:/RGKmid3B3HHF49xGwwjE/kzOhB0a4oPkcTLa:/AhC3tHHF4kjYkzOB0a4Ncfa
  • TLSH
    T1FA63F151C3E85D23F7FA0471839AEF91E2469DF690854623312FAD0E17BF4D00BAAD58
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Blocks application from running via registry modification

    Adds application to list of disallowed applications.

    defense_evasion

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Disables RegEdit via registry modification

    defense_evasion

  • Disables Task Manager via registry modification

    defense_evasion

  • Disables cmd.exe use via registry modification

    defense_evasion

  • Indicator Removal: File Deletion

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1