fc90a0af0bf3ce78320b17e76b589a114bce7e5a9591d8f2fe029f00b3809ce3

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
x86/ophcrack_nogui.exe
Size 1.5MB
Sample260910-pr2hestbqg
SHA256 fc90a0af0bf3ce78320b17e76b589a114bce7e5a9591d8f2fe029f00b3809ce3
MD5 0de8ac7bd0ffb4f74395154f2ad02a7a
SHA1 bc04ca05185046a170b1dd69f297c00ad44261ab
SHA512 a1667d9852aa8858d4bfba604e5d4ce704f168f08809dcc29a8ff24531b58de89c480ba82cbc24e929a7773be53cfcf58b4e6be908abb267c8f8934e0ba1ac0b
SSDEEP 24576:hYc2Ibs09mZCzseIATVErC3cqNw/lwFxm7voi9rWx/Mrs3ejF1S8:C09mD/lwFxEkMZjF1f
TLSH
T18C758D9DFFC68DE7EE11057689E6933B073AD6506253DBE3D718D038AC173522E8AA04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ophcrack_nogui.exe

C:\Users\Admin\AppData\Local\Temp\x86\ophcrack_nogui.exe
"C:\Users\Admin\AppData\Local\Temp\x86\ophcrack_nogui.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4884-0-0x0000000000400000-0x000000000068C000-memory.dmp

Download