Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3XHorionUPDATED.rar
windows7-x64
1XHorionUPDATED.rar
windows10-2004-x64
1XHorionUPD...ns.txt
windows7-x64
1XHorionUPD...ns.txt
windows10-2004-x64
1XHorionUPD...on.exe
windows7-x64
10XHorionUPD...on.exe
windows10-2004-x64
10XHorionUPD...nt.exe
windows7-x64
3XHorionUPD...nt.exe
windows10-2004-x64
3XHorionUPD...er.dll
windows10-2004-x64
1XHorionUPD...re.dll
windows10-2004-x64
1XHorionUPD...cp.dll
windows10-2004-x64
1XHorionUPD...pl.dll
windows7-x64
1XHorionUPD...pl.dll
windows10-2004-x64
1XHorionUPD...xt.dll
windows10-2004-x64
1XHorionUPD...ec.dll
windows10-2004-x64
1XHorionUPD...ef.dll
windows10-2004-x64
1XHorionUPD...ec.dll
windows10-2004-x64
1XHorionUPD...ta.dll
windows10-2004-x64
1XHorionUPD...hc.dll
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
01/03/2025, 22:06
Static task
static1
Behavioral task
behavioral1
Sample
XHorionUPDATED.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XHorionUPDATED.rar
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/Instructions.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/Instructions.txt
Resource
win10v2004-20250217-en
Behavioral task
behavioral5
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorion.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorion.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral7
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorionClient.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorionClient.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral9
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/WlanRadioManager.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral10
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/d3d10core.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral11
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/l2nacp.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral12
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/libvpl.dll
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/libvpl.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral14
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/msauserext.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral15
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/pstorec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral16
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/wlanpref.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral17
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/wlansec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral18
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/msdelta.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral19
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/nlahc.dll
Resource
win10v2004-20250217-en
General
-
Target
XHorionUPDATED/XHorionUPDATED/XHorion/bin/wlanpref.dll
-
Size
758KB
-
MD5
c9c519baeea9bc3679576f55621b9828
-
SHA1
dc7a06f7ea6a262a52f38162de95e7d1c091fdb6
-
SHA256
2d219e5d709d27462b807e0455a2ecfb77d61e694d43dbad82eb81eddcbd881a
-
SHA512
0f1d60de2ab21a0b391a23b9c353e5e28be097b0235f68ff3e909c806c6404c7111e4e130790264eef977f37da6d9754dba1f104158811084679c069cbfe81d3
-
SSDEEP
12288:yL9GSda7ZUoV+dQxIRsI47/4CD/Qtn47/4C9mCHDd:3SARsSxIoIOf
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WlanPref.WlanPrefLUA.1\CurVer regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WlanPref.WlanPrefLUA.1 regsvr32.exe