Overview
overview
4Static
static
3HorrorMods...t.json
windows10-2004-x64
3HorrorMods...t.json
windows11-ltsc_2024-x64
3HorrorMods...t.html
windows10-2004-x64
3HorrorMods...t.html
windows11-ltsc_2024-x64
4HorrorMods...ks.cfg
windows10-2004-x64
3HorrorMods...ks.cfg
windows11-ltsc_2024-x64
3HorrorMods...erties
windows10-2004-x64
3HorrorMods...erties
windows11-ltsc_2024-x64
3HorrorMods....0.jar
windows10-2004-x64
1HorrorMods....0.jar
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 20:14
Static task
static1
Behavioral task
behavioral1
Sample
HorrorMods/manifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
HorrorMods/manifest.json
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
HorrorMods/modlist.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
HorrorMods/modlist.html
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
HorrorMods/overrides/config/MouseTweaks.cfg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
HorrorMods/overrides/config/MouseTweaks.cfg
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
HorrorMods/overrides/config/fabric/indigo-renderer.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
HorrorMods/overrides/config/fabric/indigo-renderer.properties
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
HorrorMods/overrides/mods/universalmod-1.0.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
HorrorMods/overrides/mods/universalmod-1.0.0.jar
Resource
win11ltsc2024-20260617-en
General
- Target HorrorMods/manifest.json
- Size 3KB
- Sample260628-yz43ysdt5v
- SHA256 23b549a868838a7dbcf7f4ce23be8b18e8bf15769bdea97d1686274c5eb29aff
- MD5 05addde487ef559fefa63c4b414dcd30
- SHA1 146f7f57cb283156623010e94724aaa4527ee343
- SHA512 54ebf7fae21cdcd81413ceb929a1fba2bed357fe02198f46aa1a14ec8be0420bb40859e1dd0b2047a15b9f081dbd20bcbc27153627bf78362d0f26af19e66463
- TLSH T1C671B61DCDAA4CBF377011AC6C69A613E89A433B00440D6B79BCB06C1F72719A29EF75
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4508 OpenWith.exe