26bb11eda4879dfcec579835c2e2a4240bd115415919d9934199be2d442bfc58 | Triage

Resubmissions

04-02-2025 00:25

250204-aq1r6sylfx 7

03-02-2025 11:18

250203-neq1gs1pdj 10

03-02-2025 11:18

250203-nedp6a1pcl 3

03-02-2025 11:08

250203-m8k6nayrdx 8

03-02-2025 11:05

250203-m6x3fa1mfr 8

03-02-2025 11:01

250203-m4qkksyqfx 8

Sharing

General

Target

OperaGXSetup.exe
Size

3.8MB
Sample

250204-aq1r6sylfx
MD5

5b8cb1947781b81771c8ccce8c2acf9c
SHA1

dac0a7b542a624c851bb182af26ad4540f9b3662
SHA256

26bb11eda4879dfcec579835c2e2a4240bd115415919d9934199be2d442bfc58
SHA512

70ace2d4fd39fa3923cca59f80a085025ad5c5477d873beef61036ee9590ac77a2a670d23cd149691b194e2b20f96661af8dd5d795a61bf9cfe31ff0c65d43c8
SSDEEP

98304:IA5YT8y844FnN4ChLeQEGfleiLdAXmjTjiMI:4T8y/IrBr5f3LU2ml

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  OperaGXSetup.exe
- Size
  
  3.8MB
- MD5
  
  5b8cb1947781b81771c8ccce8c2acf9c
- SHA1
  
  dac0a7b542a624c851bb182af26ad4540f9b3662
- SHA256
  
  26bb11eda4879dfcec579835c2e2a4240bd115415919d9934199be2d442bfc58
- SHA512
  
  70ace2d4fd39fa3923cca59f80a085025ad5c5477d873beef61036ee9590ac77a2a670d23cd149691b194e2b20f96661af8dd5d795a61bf9cfe31ff0c65d43c8
- SSDEEP
  
  98304:IA5YT8y844FnN4ChLeQEGfleiLdAXmjTjiMI:4T8y/IrBr5f3LU2ml
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer