Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    8s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 06:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260925-gr1l5abb48
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5964
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
        PID:4784
        • C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
          3⤵
            PID:4436
            • C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b8,0x2bc,0x2c0,0x298,0x2c4,0x7ff7ab2e6998,0x7ff7ab2e69a8,0x7ff7ab2e69b8
              4⤵
                PID:3100
              • C:\Users\Admin\AppData\Local\Temp\.opera\89993584-662d-4957-baac-204f1ec9de73 Opera Installer Temp\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\89993584-662d-4957-baac-204f1ec9de73 Opera Installer Temp\installer.exe" --version
                4⤵
                  PID:5980
                • C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4436 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\89993584-662d-4957-baac-204f1ec9de73 Opera Installer Temp\opera_package_20260925070351" --session-guid=93aef324-68a4-483b-a5d1-3a576e9ebd97 --server-tracking-blob=NGE2OTEyMjkwMTQ5MjAyNmM2YjJjYTE1NDU0MmYwZTM0ODA2NDdjYTYzYjc2M2E0ZWNiYTAxOGQ5Njc2ZDBjNDp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhJnV0bV9jb250ZW50PTYxMjYzNCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc5MDMxNjIzMC41Mzk5IiwidXNlcmFnZW50IjoiT3BlcmEgSW5zdGFsbGVyLzEuMCIsInV0bSI6eyJjYW1wYWlnbiI6InNwb3RpZnlfb3BlcmEiLCJjb250ZW50IjoiNjEyNjM0IiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJ3cmsifSwidXVpZCI6IjdiOWUzMTAzLTIzNTAtNDVhNS04ZTNmLTcyYzhiNWRmZDMxZiJ9 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=F807000000000000
                  4⤵
                    PID:3708
                    • C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                      C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff7ab2e6998,0x7ff7ab2e69a8,0x7ff7ab2e69b8
                      5⤵
                        PID:4256

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                    • Size 471B
                    • SHA256 ac6b8071d1ce338e6890adb8a2bd9c9f771608ef2a12030a7c9bbc11c1d2ce29
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                    • Size 416B
                    • SHA256 93c9ceb0aa0591ba6b6b459d6d8198f3947eb6be67a520a05b1548206d9851e8
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\89993584-662d-4957-baac-204f1ec9de73 Opera Installer Temp\installer.exe
                    • Size 1.3MB
                    • SHA256 d46027bf2a50a3a6d7ea8a955d1cf9c77c70c4b3c625ade680a57be27115c1e6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.6MB
                    • SHA256 610d5118df2cc48482bef9926f38625f698963dd7a735bd66c3d3b3be4fca585
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.2MB
                    • SHA256 c51b09096ebdb927e43add72af1e306ba6fab3dd9504de7cdbf05e40d3ced643
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.1MB
                    • SHA256 41f4e8f230e5358fc556b5a55466e90e88d7046428b11ae54714ff3d6e15f406
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.5MB
                    • SHA256 18c9e19dda2a063832a2ee00394bfe8a60702db576b98c22ec99a4d90708fe07
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.1MB
                    • SHA256 6983e19d980b8304ceeb9db505d5ef39eba0ca454d50320dd888c063cd6ed7c5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    installer.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0B237119\installer.exe
                    • Size 1.3MB
                    • SHA256 8d517e7deac1d0fedf86d3429e29766fa0cb30f512aa42c428f8c68f82d24ae9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    OpInst.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                    • Size 1.4MB
                    • SHA256 087a20972a5145b3e5b827eb28d25757e196bc7fce47296c3a01c0d3190d78eb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    OpInst.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                    • Size 1.2MB
                    • SHA256 64602aaf20885d1a7db3837cca117b839eb27862340b35919030a679ff080bcb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    OpInst.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                    • Size 1.5MB
                    • SHA256 4927e8004841c3d9825c63d9c66b0c6c72a690262ded40911a6ed19a1a15d09a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    bg.png
                    • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                    • Size 224KB
                    • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    settings.dat
                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                    • Size 40B
                    • SHA256 8fe6a6970f9c5620ee3214e442fc2df3dddb40af46898ef1411388b384a644a0
                    • MD5 SHA1 SHA512
                    Submit Download