Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
01/11/2026, 18:16
General
- Target Opera_GX_assistant_138.0.6044.65_Setup.exe
- Size 3.2MB
- Sample261101-wwrx4sxtfx
- SHA256 8d1e4a8a13191d403e17a993896355662aa334be3bc865e16aa7286096ae7ee2
Score
7/10
Malware Config
Signatures
- Writes a Windows system DLL name to a user directory 2 TTPs 1 IoCs
A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Opera_GX_assistant_138.0.6044.65_Setup.exe"C:\Users\Admin\AppData\Local\Temp\Opera_GX_assistant_138.0.6044.65_Setup.exe"1⤵
- Writes a Windows system DLL name to a user directory
- System Location Discovery: System Language Discovery