Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3XHorionUPDATED.rar
windows7-x64
1XHorionUPDATED.rar
windows10-2004-x64
1XHorionUPD...ns.txt
windows7-x64
1XHorionUPD...ns.txt
windows10-2004-x64
1XHorionUPD...on.exe
windows7-x64
10XHorionUPD...on.exe
windows10-2004-x64
10XHorionUPD...nt.exe
windows7-x64
3XHorionUPD...nt.exe
windows10-2004-x64
3XHorionUPD...er.dll
windows10-2004-x64
1XHorionUPD...re.dll
windows10-2004-x64
1XHorionUPD...cp.dll
windows10-2004-x64
1XHorionUPD...pl.dll
windows7-x64
1XHorionUPD...pl.dll
windows10-2004-x64
1XHorionUPD...xt.dll
windows10-2004-x64
1XHorionUPD...ec.dll
windows10-2004-x64
1XHorionUPD...ef.dll
windows10-2004-x64
1XHorionUPD...ec.dll
windows10-2004-x64
1XHorionUPD...ta.dll
windows10-2004-x64
1XHorionUPD...hc.dll
windows10-2004-x64
1Analysis
-
max time kernel
107s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
01/03/2025, 22:06
Static task
static1
Behavioral task
behavioral1
Sample
XHorionUPDATED.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XHorionUPDATED.rar
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/Instructions.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/Instructions.txt
Resource
win10v2004-20250217-en
Behavioral task
behavioral5
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorion.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorion.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral7
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorionClient.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/XHorionClient.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral9
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/WlanRadioManager.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral10
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/d3d10core.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral11
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/l2nacp.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral12
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/libvpl.dll
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/libvpl.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral14
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/msauserext.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral15
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/pstorec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral16
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/wlanpref.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral17
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/bin/wlansec.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral18
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/msdelta.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral19
Sample
XHorionUPDATED/XHorionUPDATED/XHorion/nlahc.dll
Resource
win10v2004-20250217-en
General
-
Target
XHorionUPDATED.rar
-
Size
1.2MB
-
MD5
31a315cc0c9ed0848b0a6a6bbc719259
-
SHA1
01759a522fb18f9e3303ea686fb2e6b1ccfd2587
-
SHA256
a50ef8bbeb3468b1eb76246551b98f0500e597c0a1d1cd552e9951cea572f6e0
-
SHA512
8457255e11862f150b876647074e9aaf460bc82ba11809395a11ba5a77b2474c7b499f359f83b490b0f69727df10fafda511b3df08b59c0e527f3436965c684d
-
SSDEEP
24576:S+Ivn2D8Fkj52SQvEYDni0jairFnTGGPc8/4yIHN1a8s5npKzcmTgDFQRkAWSXxk:S+I5kj52Zv7Di7iRBE8/4JHXa8mKzHgt
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4384 7zFM.exe Token: 35 4384 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4384 7zFM.exe