Overview
overview
4Static
static
3HorrorMods...t.json
windows10-2004-x64
3HorrorMods...t.json
windows11-ltsc_2024-x64
3HorrorMods...t.html
windows10-2004-x64
3HorrorMods...t.html
windows11-ltsc_2024-x64
4HorrorMods...ks.cfg
windows10-2004-x64
3HorrorMods...ks.cfg
windows11-ltsc_2024-x64
3HorrorMods...erties
windows10-2004-x64
3HorrorMods...erties
windows11-ltsc_2024-x64
3HorrorMods....0.jar
windows10-2004-x64
1HorrorMods....0.jar
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 20:14
Static task
static1
Behavioral task
behavioral1
Sample
HorrorMods/manifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
HorrorMods/manifest.json
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
HorrorMods/modlist.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
HorrorMods/modlist.html
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
HorrorMods/overrides/config/MouseTweaks.cfg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
HorrorMods/overrides/config/MouseTweaks.cfg
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
HorrorMods/overrides/config/fabric/indigo-renderer.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
HorrorMods/overrides/config/fabric/indigo-renderer.properties
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
HorrorMods/overrides/mods/universalmod-1.0.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
HorrorMods/overrides/mods/universalmod-1.0.0.jar
Resource
win11ltsc2024-20260617-en
General
- Target HorrorMods/overrides/config/MouseTweaks.cfg
- Size 135B
- Sample260628-yz43ysdt5v
- SHA256 4069ce1a439d8c37453c1b1e9f2037e0942674c7e48723a39b37eab245792ad4
- MD5 ff577ca09e989c07c056c7cdff465be3
- SHA1 651b3e4db2d430dc1da3566b2984b264061a6794
- SHA512 5a86dc45e2999e337cb36f69ca9d388495ea496058b7346d24369c272bec91af055d3fbc37a26a86d0af03a1a29605c4c846612eb58280bafdb648716220927c
- TLSH T181C0920BEC073BEA06F58A2CCDDE968292B90A38C110E52604293A058FD10FF65A358E
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2289519114-2956110270-1748446682-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2289519114-2956110270-1748446682-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4772 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\HorrorMods\overrides\config\MouseTweaks.cfg1⤵
- Modifies registry class
PID:5652
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4772