General
- Target OperaGXSetup.exe
- Size 3.9MB
- Sample260908-ncwsysal8w
- SHA256 e929fad8643dc7726526e63a37885e341000f56b753081e466b6bf0c31eac0bf
- MD5 5945a564c2eec439e637cc2282980f93
- SHA1 0dc6f010e1c0a696683e0666ecdf21cc576ed67c
- SHA512 1175aa5a8960e26eb7786a546b68cc57a29ec6a25ce6d7eddc319953daa9cb99edecfe6259605f17c5809b884c0fa29e023bfa93b1f60cf3f13b0d0a21bd12c1
- SSDEEP 98304:jAolwgfydH3logud10Rpu+vC5p6/fReVEjwlJvEvbT82cb+e:BQdH16d10Rpua8VnrE6+e
- TLSH T195162321BBC554B5E97307324E65FB998ABDF0691F022B8B33841EBD9E711815E34F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OperaGXSetup.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target OperaGXSetup.exe
- Size 3.9MB
- SHA256 e929fad8643dc7726526e63a37885e341000f56b753081e466b6bf0c31eac0bf
- MD5 5945a564c2eec439e637cc2282980f93
- SHA1 0dc6f010e1c0a696683e0666ecdf21cc576ed67c
- SHA512 1175aa5a8960e26eb7786a546b68cc57a29ec6a25ce6d7eddc319953daa9cb99edecfe6259605f17c5809b884c0fa29e023bfa93b1f60cf3f13b0d0a21bd12c1
- SSDEEP 98304:jAolwgfydH3logud10Rpu+vC5p6/fReVEjwlJvEvbT82cb+e:BQdH16d10Rpua8VnrE6+e
- TLSH T195162321BBC554B5E97307324E65FB998ABDF0691F022B8B33841EBD9E711815E34F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1