Overview

overview

8

Static

static

7

OperaGXSetup.exe

windows7-x64

7

OperaGXSetup.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OperaGXSetup.exe

  • Size

    3.4MB

  • Sample

    240221-v6yyqscg48

  • MD5

    9bfbe2aaa39ad29c2f7e91a0ae636f7e

  • SHA1

    58193300063b889c3b8c308b3a13c87973e8495e

  • SHA256

    f8ff4ea9bbb0e8472c1e2269f2581fbd5393f07170fadd593fd3f999562cb392

  • SHA512

    6a0a660daacdbbd9fd60bb09b5d607121ed178b11e563b1de269e3ea41fb7d0571c20eec6519df6ffd6e2963ec12b8e00ca512a2c3ee16dad4b1e041938c9911

  • SSDEEP

    98304:8WW8iYgdTl3Z6FTwpNgV9pNYrTtRaVyjEHRrnhb5qLYNV6aCV3:8WWEKZ8Um3qT58ndrIaC3

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      OperaGXSetup.exe

    • Size

      3.4MB

    • MD5

      9bfbe2aaa39ad29c2f7e91a0ae636f7e

    • SHA1

      58193300063b889c3b8c308b3a13c87973e8495e

    • SHA256

      f8ff4ea9bbb0e8472c1e2269f2581fbd5393f07170fadd593fd3f999562cb392

    • SHA512

      6a0a660daacdbbd9fd60bb09b5d607121ed178b11e563b1de269e3ea41fb7d0571c20eec6519df6ffd6e2963ec12b8e00ca512a2c3ee16dad4b1e041938c9911

    • SSDEEP

      98304:8WW8iYgdTl3Z6FTwpNgV9pNYrTtRaVyjEHRrnhb5qLYNV6aCV3:8WWEKZ8Um3qT58ndrIaC3

    Score
    8/10
    upxspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks