Overview

overview

10

Static

static

10

opera.exe

windows10-1703-x64

10

opera.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    opera.exe

  • Size

    3.2MB

  • MD5

    f5b969db9355e0972cded33898f88ad5

  • SHA1

    e80f5255b188a511296db4a0e48ab84a3ceddf97

  • SHA256

    d98e7b706741e4da67d03aa23b6776fe4fd118f910a10472e381131b31551169

  • SHA512

    92e43cce03e2e13e8df42027cd9c20e5fa3b40ec90a5477fd0a0e11e4303645e6bdbee780a12f0b2162733cb9c4cc7c6d76ab5a6a18cbf153274c343d992adce

  • SSDEEP

    49152:OHPws2iTa2UUePNlcF1TT4zJM7CXwk9hxvJ4ZoGddTHHB72eh2NT:OHIs2iTa2UUePNlcF134zJM7yhY

Score
10/10
operaquasar

Malware Config

Extracted

Family

quasar

Version

1.0

Botnet

Opera

C2

RomaPro28937723-49554.portmap.io:49554

Mutex

dbdeb9e2-1d62-453a-8c06-8a6bf4be3071

Attributes
  • encryption_key

    8A2A7B58F2803115FF796E733C7311493928333B

  • install_name

    launcher.exe

  • log_directory

    Opera Logs

  • reconnect_delay

    3000

  • startup_key

    Opera Launcher

  • subdirectory

    Opera Software

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • opera.exe
    .exe windows x86

    Password: 2

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections