General
- Target OperaGXSetup (4).exe
- Size 3.9MB
- Sample260503-qa9cdacz3r
- SHA256 62067ee0da2b30ce3835c3709e9b8ad149d512d2cecc5d4877595ca2a5c17374
- MD5 42581ed6b282f7c77218f2e2f2e6d1de
- SHA1 c87978def75de7551c67ccab6319f1cbb9d15d85
- SHA512 20bf84c7eb5364ad623d8a5a37f55b072b1087d0c6de09f26d67d4de23a344c672bf145b9a79ee4b04f372b2f3833cdf1fe61d7a0c2614fafaf30232930841d2
- SSDEEP 98304:qAYE9x9Vef3KZ/x7E3dhqSiBfu3ofErPql4FEll:0E9x9BZ7EHu4yz3
- TLSH T13B1623227B4484B5E5C322320F68F7B9D1FDF6251F6A144F37C40E6E8E70681AA36B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OperaGXSetup (4).exe
Resource
win11-20260130-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target OperaGXSetup (4).exe
- Size 3.9MB
- SHA256 62067ee0da2b30ce3835c3709e9b8ad149d512d2cecc5d4877595ca2a5c17374
- MD5 42581ed6b282f7c77218f2e2f2e6d1de
- SHA1 c87978def75de7551c67ccab6319f1cbb9d15d85
- SHA512 20bf84c7eb5364ad623d8a5a37f55b072b1087d0c6de09f26d67d4de23a344c672bf145b9a79ee4b04f372b2f3833cdf1fe61d7a0c2614fafaf30232930841d2
- SSDEEP 98304:qAYE9x9Vef3KZ/x7E3dhqSiBfu3ofErPql4FEll:0E9x9BZ7EHu4yz3
- TLSH T13B1623227B4484B5E5C322320F68F7B9D1FDF6251F6A144F37C40E6E8E70681AA36B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1