Analysis
-
max time kernel
257s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
27-09-2024 06:47
Static task
static1
Behavioral task
behavioral1
Sample
ophcrack-3.8.0-bin.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
x64/ophcrack.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
x64/ophcrack_nogui.exe
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
x86/ophcrack.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
x86/ophcrack_nogui.exe
Resource
win11-20240802-en
General
-
Target
ophcrack-3.8.0-bin.zip
-
Size
15.1MB
-
MD5
e8cb96786f5180a796465d73c5189495
-
SHA1
f7975e274bc4344080cab23408f78e9ad659e857
-
SHA256
36a35b2f84fe4ebc4652776abb55256f371998d8044253d062858e7ed77545db
-
SHA512
df29fd423b296af5bce7ae3f8eeffdc5600ac8fe49a48d90f93630efe7e60af4d6e1b6206c46914d1e3b4124f64b648e65c6b27fb9581c916e6a38545856aa43
-
SSDEEP
393216:sZmNVLovxEiFTaUsUhhWTis1DDXXvhFC0fB2B03WTl:7NzyTa2hhWWWbzzAa3WTl
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\ophcrack-3.8.0-bin.zip1⤵PID:396
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4312