Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 16:14
Static task
static1
Behavioral task
behavioral1
Sample
OperaSetup.exe
Resource
win7-20240221-en
General
-
Target
OperaSetup.exe
-
Size
2.0MB
-
MD5
ff21f2d888845a2a00eaa5ce2b46cb6c
-
SHA1
ba00a62210791c653138d2f19d2135a008e8672f
-
SHA256
bdaf682d8b72b0b5a156765ff43eac21a612f803a81fab242f1817823d23f3b7
-
SHA512
a8a5be0873485063814a011e087d3a0a2cc2b94d9a51331141182c3a5220cc797ff64e6cb27f84f467240eda85b664da0399b71ee438f94243caff199ceda586
-
SSDEEP
49152:+NEyYcQ78Kpjjxv6htWn1iTl0egZ3s0OSZsnh7f3kHMq2:0EP784oysWj3s0GhYMq2
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2864 setup.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaSetup.exe"C:\Users\Admin\AppData\Local\Temp\OperaSetup.exe"1⤵PID:1740
-
C:\Users\Admin\AppData\Local\Temp\7zSCC655616\setup.exeC:\Users\Admin\AppData\Local\Temp\7zSCC655616\setup.exe --server-tracking-blob=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⤵
- Executes dropped EXE
PID:2864
-
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:2508
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
MD58a30cb3105f33fd2e77e70ec8f12daf0
SHA190781a042276779d417be8874dc3367aab936736
SHA2560ac24f79102aef4a0c06a950be7d2fc31586f0e50f54cf1365dd4ce3e372ff79
SHA5125a70817c66d30fd04e442cfa496cb5998dd3298790a6f84a5ad0fb1c56181b7418a72d94eff7737486f010439c0a44a51de78d5247fa40f8bfa30fd9cae9a4be