Overview
overview
3Static
static
3x64/ophcrack.exe
windows10-2004-x64
1x64/ophcrack.exe
windows11-ltsc_2024-x64
1x64/ophcra...ui.exe
windows10-2004-x64
1x64/ophcra...ui.exe
windows11-ltsc_2024-x64
1x86/ophcrack.exe
windows10-2004-x64
3x86/ophcrack.exe
windows11-ltsc_2024-x64
3x86/ophcra...ui.exe
windows10-2004-x64
3x86/ophcra...ui.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/11/2026, 12:17
Static task
static1
Behavioral task
behavioral1
Sample
x64/ophcrack.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
x64/ophcrack.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
x64/ophcrack_nogui.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
x64/ophcrack_nogui.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
x86/ophcrack.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
x86/ophcrack.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
x86/ophcrack_nogui.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
x86/ophcrack_nogui.exe
Resource
win11ltsc2024-20260911-en
General
- Target x64/ophcrack.exe
- Size 15.5MB
- Sample261113-pgalysbx5q
- SHA256 95e73a3d5e88f79e2c3bf6e146a389e90ec91c5c56ac8dd381bb9e45164c7243
- MD5 a2a8da835c7341b606f10805fba26687
- SHA1 6b55ce3ffd18e949dc1210f310a02a74d452c687
- SHA512 8ebd695af09161b2eac680393018edd1b42310ccc8ca7e2fa88ec933b3db82e7997bb6d65d41c78905941303042180170d957811527cd3db629e8ab140c94ead
- SSDEEP 393216:Y3AKPF1arrr3Jsv6tWKFdu9CsgQj3JrwplPvZ:mAK91+
- TLSH T119F65A57F2A350ECC16BC13443ABA772B93178681534BE6F2654DB392F21F605B2B728
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4568 ophcrack.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4568 ophcrack.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4568 ophcrack.exe