Analysis

  • max time kernel
    106s
  • max time network
    140s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    17-11-2024 15:40

General

  • Target

    MIXED CRACKING PACK #2/Dorker Gorker/xNet/Microsoft Windows Protocol Services Host.exe

  • Size

    10KB

  • MD5

    8f4aab2fec1a08d6ca733d88462e75ee

  • SHA1

    3660982b5bc9b54f7c7a96fe905c2861e5e9c624

  • SHA256

    eea3e94b837225ea82492c61f4b1aaead7654d59ad948a28af3b66e370d473e6

  • SHA512

    243157e09cb2aec487b0300718d12211b0311a6d31a001e9839dea21718cd103e27c85e229a10a5e371bb2afee1087a53b3fa8bcd7382291c354a16ed3510ea8

  • SSDEEP

    192:eaCxYViLxU3osEzi0DlPGgnJ7eLHWmY4T4BJ3U/8Wg:jctDsb0QgnYHETk/8W

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MIXED CRACKING PACK #2\Dorker Gorker\xNet\Microsoft Windows Protocol Services Host.exe
    "C:\Users\Admin\AppData\Local\Temp\MIXED CRACKING PACK #2\Dorker Gorker\xNet\Microsoft Windows Protocol Services Host.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    PID:236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/236-0-0x00007FFBD7B53000-0x00007FFBD7B55000-memory.dmp

    Filesize

    8KB

  • memory/236-1-0x0000000000040000-0x0000000000048000-memory.dmp

    Filesize

    32KB

  • memory/236-2-0x00007FFBD7B50000-0x00007FFBD8612000-memory.dmp

    Filesize

    10.8MB

  • memory/236-3-0x00007FFBD7B53000-0x00007FFBD7B55000-memory.dmp

    Filesize

    8KB

  • memory/236-4-0x00007FFBD7B50000-0x00007FFBD8612000-memory.dmp

    Filesize

    10.8MB