Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

6

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/07/2026, 18:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260728-wx2hyaah42
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3664
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4300
      • C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:1424
        • C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff6a06bad88,0x7ff6a06bad94,0x7ff6a06bada0
          4⤵
          • Executes dropped EXE
          PID:4760
        • C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:1188
        • C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1424 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_20260728191903" --session-guid=be74878c-0ab3-4f8f-9530-3340fd118272 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=E407000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:4140
          • C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff6a06bad88,0x7ff6a06bad94,0x7ff6a06bada0
            5⤵
            • Executes dropped EXE
            PID:4628
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe" --backend --initial-pid=1424 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031" --session-guid=be74878c-0ab3-4f8f-9530-3340fd118272 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.85
            5⤵
            • Executes dropped EXE
            PID:1312
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff6e65fad88,0x7ff6e65fad94,0x7ff6e65fada0
              6⤵
                PID:5448
          • C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1552
          • C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\assistant_installer.exe" --version
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Suspicious use of WriteProcessMemory
            PID:936
            • C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd44040,0xd4404c,0xd44058
              5⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:4920

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Size 1KB
          • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B46811C17859FFB409CF0E904A4AA8F8
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
          • Size 528B
          • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
          • Size 471B
          • SHA256 3db57346fd2cd667434d1879954ba2f2ff102005b6af937f1e3e0d9ddf435639
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Size 174B
          • SHA256 b9a69faa95c46b716d6713674f29cb7c62b32a6d544e073ed532299639ecde5f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B46811C17859FFB409CF0E904A4AA8F8
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
          • Size 170B
          • SHA256 4f37a63cba384d24b85760c42fbac1c34bd7fde3470780b1ec63032541b89436
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
          • Size 416B
          • SHA256 f5d3642f17dcea1e3c41e43c762705c57743a9a448ee5ec179bf91141b0c6cf1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\icudtl.dat
          • Size 448KB
          • SHA256 5200b010718a72d1391acaa9f4e35e12c32116db79c49018c7ef2e69aa172bb7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          installer.exe
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
          • Size 2.4MB
          • SHA256 1be8320ca05270be5de0ab4a8476571120b72697f2b20f7d063b0d1bbb61f373
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          installer.exe
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
          • Size 1.8MB
          • SHA256 499312c928ea549929988d1722fc10c9e7fd537b6c4b71fbb0f2f377722d16a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          installer.exe
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
          • Size 448KB
          • SHA256 0cca032e2e6d02fec5bce2f7dd2bcb81bc1aa7c1829fd54e12b2a77396c5cd6b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          installer_helper_64.exe
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer_helper_64.exe
          • Size 448KB
          • SHA256 742e08fbd292ee47bb262c25144496c55fcb5f248b1d146fff4f9edb008466e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libEGL.dll
          • Size 426KB
          • SHA256 04e1daf04ea42ce08fad31ac2afcd50138913263a4d179d097da0237df9db966
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libGLESv2.dll
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libGLESv2.dll
          • Size 384KB
          • SHA256 aa0f550e31ea3cef360263b55e776198e907f8d45cb8484f62ce9d72644e3175
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bg.pak
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bg.pak
          • Size 384KB
          • SHA256 198d548054555d296f43928cb0e891078c0bba60c74045a119615276555f0048
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bn.pak
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bn.pak
          • Size 384KB
          • SHA256 10b33656c4bc55f082d4a60db65609cbee24e4d95897c8206434520dd10d2093
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ca.pak
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\ca.pak
          • Size 384KB
          • SHA256 b094c856add288b90969dbee5a413f7688f0b99abd44f11ca843a546e9f3c349
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cs.pak
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\cs.pak
          • Size 384KB
          • SHA256 82814a1cbf87d02861d665303aa184327fca322323b7326ac69bf0935a86cc79
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          da.pak
          • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\da.pak
          • Size 384KB
          • SHA256 b3e0724cd459096f9c0fd66e14c8a8d0cc18340dbe1663e1c2b0c0ccca8874bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          additional_file0.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\additional_file0.tmp
          • Size 2.8MB
          • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          assistant_installer.exe
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\assistant_installer.exe
          • Size 2.4MB
          • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          dbgcore.DLL
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\dbgcore.DLL
          • Size 222KB
          • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          dbghelp.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\assistant\dbghelp.dll
          • Size 1.8MB
          • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          installer_prefs_include.json
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\installer_prefs_include.json
          • Size 224B
          • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          installer_prefs_include.json
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\installer_prefs_include.json
          • Size 239B
          • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          installer_prefs_include.json
          • Path C:\Users\Admin\AppData\Local\Temp\.opera\d2d3c236-fbee-44b3-8dcf-8d2674eb6605 Opera Installer Temp\opera_package_202607281919031\installer_prefs_include.json
          • Size 1KB
          • SHA256 99b7d37f6a46504fd725e6fc1b7f37bb2d024bb32d7b140e9580cc37ec7260bb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          installer.exe
          • Path C:\Users\Admin\AppData\Local\Temp\7zSCC0F7509\installer.exe
          • Size 8.3MB
          • SHA256 3a849bcab0ee94873a4cd5d14906cfcd242257b5f23c1029fe901d6b902fcfa5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OpInst.exe
          • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
          • Size 3.1MB
          • SHA256 11662d6f7709710f9a180d8aac25acc52cff70206df233fea8fd05ea241d051b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bg.png
          • Path C:\Users\Admin\AppData\Local\Temp\bg.png
          • Size 224KB
          • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
          • Size 40B
          • SHA256 78c48afdcf87973e7c2696affbf19f75d4cdf514e98961a8dee0b97fdad3fb19
          • MD5 SHA1 SHA512
          Submit Download