MrsMajor-main.zip
- SHA256 d24f288f230997bcc86bbd296baf21717e3fced6fa26d0380ca135085f0a11a8
Overview
overview
10Static
static
3MrsMajor-m...ge.vbs
windows10-2004-x64
5MrsMajor-m...ge.vbs
windows10-ltsc_2021-x64
5MrsMajor-m...ge.vbs
windows11-ltsc_2024-x64
8MrsMajor-m..._X.bat
windows10-2004-x64
3MrsMajor-m..._X.bat
windows10-ltsc_2021-x64
3MrsMajor-m..._X.bat
windows11-ltsc_2024-x64
8MrsMajor-m...er.vbs
windows10-2004-x64
5MrsMajor-m...er.vbs
windows10-ltsc_2021-x64
5MrsMajor-m...er.vbs
windows11-ltsc_2024-x64
8MrsMajor-m...ui.exe
windows10-2004-x64
3MrsMajor-m...ui.exe
windows10-ltsc_2021-x64
3MrsMajor-m...ui.exe
windows11-ltsc_2024-x64
8MrsMajor-m...er.bat
windows10-2004-x64
3MrsMajor-m...er.bat
windows10-ltsc_2021-x64
3MrsMajor-m...er.bat
windows11-ltsc_2024-x64
3MrsMajor-m...on.bat
windows10-2004-x64
5MrsMajor-m...on.bat
windows10-ltsc_2021-x64
5MrsMajor-m...on.bat
windows11-ltsc_2024-x64
5MrsMajor-m...lt.vbs
windows10-2004-x64
5MrsMajor-m...lt.vbs
windows10-ltsc_2021-x64
5MrsMajor-m...lt.vbs
windows11-ltsc_2024-x64
8MrsMajor-m...er.vbs
windows10-2004-x64
MrsMajor-m...er.vbs
windows10-ltsc_2021-x64
MrsMajor-m...er.vbs
windows11-ltsc_2024-x64
MrsMajor-m...rt.vbs
windows10-2004-x64
7MrsMajor-m...rt.vbs
windows10-ltsc_2021-x64
7MrsMajor-m...rt.vbs
windows11-ltsc_2024-x64
5Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MrsMajor-main/CPUUsage.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
MrsMajor-main/CPUUsage.vbs
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
MrsMajor-main/CPUUsage.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral4
Sample
MrsMajor-main/DreS_X.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral5
Sample
MrsMajor-main/DreS_X.bat
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
4 signatures
900 seconds
Behavioral task
behavioral6
Sample
MrsMajor-main/DreS_X.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral7
Sample
MrsMajor-main/Launcher.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral8
Sample
MrsMajor-main/Launcher.vbs
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral9
Sample
MrsMajor-main/Launcher.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral10
Sample
MrsMajor-main/MrsMjrGui.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral11
Sample
MrsMajor-main/MrsMjrGui.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral12
Sample
MrsMajor-main/MrsMjrGui.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral13
Sample
MrsMajor-main/MrsMjrGuiLauncher.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral14
Sample
MrsMajor-main/MrsMjrGuiLauncher.bat
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral15
Sample
MrsMajor-main/MrsMjrGuiLauncher.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
Behavioral task
behavioral16
Sample
MrsMajor-main/WinLogon.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral17
Sample
MrsMajor-main/WinLogon.bat
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral18
Sample
MrsMajor-main/WinLogon.bat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral19
Sample
MrsMajor-main/default.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral20
Sample
MrsMajor-main/default.vbs
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral21
Sample
MrsMajor-main/default.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral22
Sample
MrsMajor-main/mrsmajorlauncher.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
21 signatures
900 seconds
Behavioral task
behavioral23
Sample
MrsMajor-main/mrsmajorlauncher.vbs
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
21 signatures
900 seconds
Behavioral task
behavioral24
Sample
MrsMajor-main/mrsmajorlauncher.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
20 signatures
900 seconds
Behavioral task
behavioral25
Sample
MrsMajor-main/reStart.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral26
Sample
MrsMajor-main/reStart.vbs
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
5 signatures
900 seconds
Behavioral task
behavioral27
Sample
MrsMajor-main/reStart.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
900 seconds
General
- Target MrsMajor-main.zip
- Size 1.6MB
- Sample260720-cgp1escs8m
- SHA256 d24f288f230997bcc86bbd296baf21717e3fced6fa26d0380ca135085f0a11a8
- MD5 c60f55c8ccd31632f46a0b7c8fe60728
- SHA1 6c919be459e3fc71b4171917e29cfa382431c6d1
- SHA512 2116d0b6df474e8eeb47ea25bce08a91dcc0c5976b193b79289eca4d2738fccd80e3279802cf187d4f94043dfbc1ebe8d665f61fa6500a0b9053ca4bf3f60df9
- SSDEEP 49152:2/Zell/uCmctj7CMlozsfcjvvRDA/l0mIS0blIcALI8dx+:2/Z8/RbtSmgIGvCmmJ0blIcALIp
- TLSH T1F77533BD4C12E5C9C834027A31D971A6C14DB8ED1854C8ABCC8E84D6CDF5BB61AADE93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MrsMajor-main/MrsMjrGui.exe
File Explorer
-
MrsMajor-main.zip.zip 1.6MB
-
MrsMajor-main/CPUUsage.vbs92B
-
MrsMajor-main/DreS_X.bat360B
-
MrsMajor-main/Icon_resource/SkullIco.ico244KB
-
MrsMajor-main/Launcher.vbs.vbs 590B
-
MrsMajor-main/MrsMjrGui.exe.exe 71KB
-
MrsMajor-main/MrsMjrGuiLauncher.bat98B
-
MrsMajor-main/README.md37B
-
MrsMajor-main/WinLogon.bat117B
-
MrsMajor-main/def_resource/@Tile@@.jpg.jpg 7KB
-
MrsMajor-main/def_resource/Skullcur.cur3KB
-
MrsMajor-main/def_resource/creepysound.mp31.2MB
-
MrsMajor-main/def_resource/f11.mp4227KB
-
MrsMajor-main/default.vbs.vbs 266B
-
MrsMajor-main/mrsmajorlauncher.vbs.vbs 3KB
-
MrsMajor-main/reStart.vbs.vbs 638B
MrsMajor-main/CPUUsage.vbs
- SHA256 28e69e90466034ce392e84db2bde3ad43ad556d12609e3860f92016641b2a738
- MD5 0e4c01bf30b13c953f8f76db4a7e857d
- SHA1 b8ddbc05adcf890b55d82a9f00922376c1a22696
- SHA512 5e66e2793e7bc88066b8df3dccb554351287dea18207e280b69d7798ecd5cdc99bd4c126c3e394db9f45f54bb561e6688f928de4f638c5eca4f101dc2cea54a1
- TLSH T15DB0045D0DC3C07F171014010C51CCC051407014D043CC1C715CD7401015140050554D
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/DreS_X.bat
- SHA256 2590879a8cd745dbbe7ad66a548f31375ccfb0f8090d56b5e4bd5909573ac816
- MD5 ba81d7fa0662e8ee3780c5becc355a14
- SHA1 0bd3d86116f431a43d02894337af084caf2b4de1
- SHA512 0b768995187f988dc15d055f9689cee3ab3908d10b05a625b40d9757c101e067bbd6067ccbcf1951ebb683f5259eec562802ea6161d59475ce86cf6bc7c957f2
- TLSH T127E0F7438803A00AD9982AE0C3DE0384F88BC0B38C7081A2A4473030B8A128DC23FFDF
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/Icon_resource/SkullIco.ico
- SHA256 4c1cfbe274f993941ac5fa512c376b6d7344800fb8be08cc6344e6c16a418311
- MD5 c7bf05d7cb3535f7485606cf5b5987fe
- SHA1 9d480d6f1e3f17d5018c1d2f4ae257ae983f0bb5
- SHA512 d30952a75d94dd64b7bd253ed72810690f3550f2262cfaaef45854fc8334f6201a8cbafb9b175c6435f7ce0499567f2fa8667b4b0046bfb651bf61eb4278e6c8
- SSDEEP 6144:8jFsHu2sS3g5Cwqv1iR2opIRvmO9YIA6qZEbr//o25u1:8juHnt3gXq9iR2op19GTgQI
- TLSH T1983401733B3BFD85D0220B7101A1E9956CA47C3BAD0585B3B8C4376FB678665AC83A35
- MD5 SHA1 SHA512 SSDEEP TLSH
MrsMajor-main/Launcher.vbs
- SHA256 6f0bb8cc239af15c9215867d6225c8ff344052aaa0deeb3452dbf463b8c46529
- MD5 b5a1c9ae4c2ae863ac3f6a019f556a22
- SHA1 9ae506e04b4b7394796d5c5640b8ba9eba71a4a6
- SHA512 a644c48562e38190720fb55a6c6e7d5ccfab60f362236fe7d63caebdc01758f17196d123fb37bd11f7e247ce8ab21812165b27496d3bd6ca5e2c5efefab8fb03
- TLSH T155F0C90D9A87C708235CE0C10A84EC08CAB08E48FC24A9B17F4AC311D4183B82EBA68D
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/MrsMjrGui.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 087fca40e079746b9c1dfaf777d3994c0321ea8f69d08238cdfc02fb109add1d
- MD5 450f49426b4519ecaac8cd04814c03a4
- SHA1 063ee81f46d56544a5c217ffab69ee949eaa6f45
- SHA512 0cae15d863120f4edc6b6dabfe2f0f3d2e028057025d7d5ffe615cde8144f29bdaf099850e91e101e95d13f8a83cb1410a06172dda25a5f92967abcbc8453cbc
- SSDEEP 1536:M1GJbcJVksz/mYyXki6GHcSVp5l/eq/mh78EZuMdUQL+ZZN24W6yos1:M4I/mYyX16rSVvl/zCQXMdUQLK211
- TLSH T10163E024F260C775C86947301852E1B217B2EE098E95AE2C55DCFD1FBEB360406EB3E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\users\guest\documents\visual studio 2015\Projects\WindowsApplication2\WindowsApplication2\obj\Debug\WindowsApplication2.pdb
mscoree
_CorExeMain
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MrsMajor-main/MrsMjrGuiLauncher.bat
- SHA256 47e6c9f62ffc41fbc555f8644ad099a96573c8c023797127f78b1a952ca1b963
- MD5 c7146f88f4184c6ee5dcf7a62846aa23
- SHA1 215adb85d81cc4130154e73a2ab76c6e0f6f2ff3
- SHA512 3b30fa1334b88af3e3382813d316104e3698173bb159c20ff3468cf3494ecfbbc32a9ae78b4919ecd47c05d506435af4a7ccee0576c0d0018a81fbd1b2dfcf10
- TLSH T1CEB00214C701C2AA3013A1C44391BC11110158C87E2C88661388524756C5554522EE54
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/README.md
- SHA256 b46bbd2401f788b42ec74f9fa179fa7421fb6154b3ecee21462234520a491c2e
- MD5 05f41a438ade8ad4c2925a35e685d92c
- SHA1 ec9653edb1178104304ba40fcb3e0c022e8c9947
- SHA512 0597eb3c530c73d4c29b4282a14bcb5808707f453788ff75e9699cef96fa3d004ef33b0f210fa74da5ebacbd108acea7968f39d722bf39a9e89fe5a032e5fff8
- MD5 SHA1 SHA512
MrsMajor-main/WinLogon.bat
- SHA256 2798dad008f62aace1841edfb43146147a9cade388c419c96da788fcaa2f76bc
- MD5 870bce376c1b71365390a9e9aefb9a33
- SHA1 176fdbdb8e5795fb5fddc81b2b4e1d9677779786
- SHA512 f17c9898f81387daf42c9b858f507889919474ac2a17f96fc6d4606be94327e0b941b23a3ccc3f4af92b8abc0522e94745616da0564cdef1c3f20ee17ee31f53
- TLSH T180B092048F89D551B01630809321B550832164E4271B94B353DAE30B6183EEE8726F98
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/def_resource/@Tile@@.jpg
- SHA256 064f135fcc026a574552f42901b51052345f4b0f122edd7acd5f2dcc023160a5
- MD5 3e21bcf0d1e7f39d8b8ec2c940489ca2
- SHA1 fa6879a984d70241557bb0abb849f175ace2fd78
- SHA512 5577e20f76d6b1cccc513392532a09bdc6dcd3a8a177b8035dc5d7eb082e0093436068f92059e301c5987e6122c4d9aff3e5ae9cc94ccc1ecc9951e2785b0922
- SSDEEP 96:hpOepyZ0P7cFODBssO+BPSXc5TQzjeExzOmWD3VJsLWsctzLxDf6j:jAWNsiKXc5czjerB7/Ds6hf6j
- TLSH T1FCF17D8BDE765A85F79B40B6D81614652F78B3D2E70084BC8EE07FC785A6D1BA408146
- MD5 SHA1 SHA512 SSDEEP TLSH
MrsMajor-main/def_resource/Skullcur.cur
- SHA256 d2b6db8b28112da51e34972dec513278a56783d24b8b5408f11997e9e67d422b
- MD5 cea57c3a54a04118f1db9db8b38ea17a
- SHA1 112d0f8913ff205776b975f54639c5c34ce43987
- SHA512 561860907fa2f53c7853094299758232a70c0cd22c6df3534abd094c6970f28792c6c334a33b129d661a46930d90fd8c98f11cb34f3e277cf20a355b792f64f0
- TLSH T15D61F12DB93C85C8F854917B4A0FA9F9C4602DE8B80511F3705B7B3FC4B967607AB91A
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/def_resource/creepysound.mp3
- SHA256 79e9a3611494b5ffafaa79788ba7e11dd218e3800c40b56684ccc0c33ab64eac
- MD5 4a9b1d8a8fe8a75c81ddba3e411ddc5d
- SHA1 e40cb1ee4490f6d7520902e12222446a8efbf9a8
- SHA512 e7a28acb04ca33d57efe0474bb67d6d4b8ceff9198198b81574c76c835d5df05d113fc468f4a4434580b1b58189f38184c376976604dc05d1424af1721995601
- SSDEEP 24576:b5G8vkaM33De+S10cJaJ9AaYiWsbFTWJXpgfS2fr1aspyyIYfTO:HtM9SbJakTiTBMGSARaspyyxa
- TLSH T1EF452374C36D381AF04759F3A9F01394A9360CB592A66CCE0DF7AF1B48659FDA273224
- MD5 SHA1 SHA512 SSDEEP TLSH
MrsMajor-main/def_resource/f11.mp4
- SHA256 a9b0f1f849e0b41924f5e80b0c4948e63fc4b4f335bbdf0f997b03a3aff55424
- MD5 17042b9e5fc04a571311cd484f17b9eb
- SHA1 585d91c69c3f9e3d2e8cb8cf984871d89cc4adbb
- SHA512 709076c6cef8dd61701c93e1fe331d2b1a218498b833db10ee4d2be0816e3444aeebfa092ab1bd10322617cf3385414e8fdb76fd90f25b44ac24d38937b4d47f
- SSDEEP 6144:e9JCN13fXdGjZdst2r99/MxTW6RGS2AVQ9safl/ppFxfBw:5VG6k9OjRGS24qsaN/pFBw
- TLSH T1903412BDFFFA6F60CE144A30CA571E9935139CC837313E975C43AA19793A28329986D4
- MD5 SHA1 SHA512 SSDEEP TLSH
MrsMajor-main/default.vbs
- SHA256 e1ebbd3abfcaddf7d6960708f3ccd8eda64c944723f0905ff76551c692b94210
- MD5 30cfd8bb946a7e889090fb148ea6f501
- SHA1 c49dbc93f0f17ff65faf3b313562c655ef3f9753
- SHA512 8e7d98e6d0c05d199114d2d6ab8da886aed68de690c4d79643868eaf051c229fff94c88d937adb3da5e31fe48116613cf79dd00dda30f296746ce0a8aded9fe2
- TLSH T101D0125E6553C229371450D3CDAECC1DD1B09900EC31B98039C5D384C1103B41DA98DE
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/mrsmajorlauncher.vbs
- SHA256 4d3aa3ecd16a6ba46a9d6c0bdacdcd9dce70d93585941a94e544696e3e6f7d92
- MD5 e3fdf285b14fb588f674ebfc2134200c
- SHA1 30fba2298b6e1fade4b5f9c8c80f7f1ea07de811
- SHA512 9b0bfbb07c77d9e9979a6c0f88b0a93010133f7dd3cf01e1de5dfbe812a5ed920e916d16d6a32fe21b9ee4b5425e61a616ded1aeeb35a410d4f77c0f9392ed0a
- TLSH T1E5710F4CA963CA3FD3F2718106DA9F06A779A538F2A14D7A709CE34085E33DC54A59CE
- MD5 SHA1 SHA512 TLSH
MrsMajor-main/reStart.vbs
- SHA256 2cbd8bc239c5cfc3ef02f8472d867dff61e5aed9fde8a3823cda28cc37d77722
- MD5 0851e8d791f618daa5b72d40e0c8e32b
- SHA1 80bea0443dc4cc508e846fefdb9de6c44ad8ff91
- SHA512 57a9d1d75dbbab842060b29f01958f7e6b27d0175ff9a3f7b97e423c1b4e3fae94547a569c2e5c88224fc5dcc785f5a1d49c61199a8c7b3afeb4fc520600df40
- TLSH T125F0EB0E1A8FC30D5B8EE1A10A98DD19D2614A4CFC30D971BA46C30480083BD5FAA5EE
- MD5 SHA1 SHA512 TLSH