5302d48f5691c9c661de10a4070045bada2220b6fd50d0172152bdd3e483912f | Triage™

Login
Reports

Overview

overview

8

Static

static

3

horizon.exe

windows10-2004-x64

8

horizon.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
horizon.exe
Size 5.2MB
Sample260822-j89bpsfp7v
SHA256 5302d48f5691c9c661de10a4070045bada2220b6fd50d0172152bdd3e483912f
MD5 8bc02387b3ac7ba00b03266c5ae439a2
SHA1 ebab3e6f4cfa0f329e2839c3c50f762e763d3d42
SHA512 8b7400fe16b375228c148165bfbc50fedf2153ba5d9ed2c8bad378a8d65c62588c49b3d48cc127f184c7d2086ac65c7fb777a04a880fec1566b018fa2055b000
SSDEEP 49152:mJAw8uPEAf7RDgbW6EpqPM57TJEq0aS6Nnpmmxah:aOuQ
TLSH
T10546E747E7B650D5E2BAC139A152B22BFC723495C738A3DB97814B061B61BE0ED3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion execution persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

horizon.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion execution persistence privilege_escalation

Behavioral task

behavioral2

Sample

horizon.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion execution persistence privilege_escalation

Malware Config

Targets

- Target
  horizon.exe
- Size 5.2MB
- SHA256 5302d48f5691c9c661de10a4070045bada2220b6fd50d0172152bdd3e483912f
- MD5 8bc02387b3ac7ba00b03266c5ae439a2
- SHA1 ebab3e6f4cfa0f329e2839c3c50f762e763d3d42
- SHA512 8b7400fe16b375228c148165bfbc50fedf2153ba5d9ed2c8bad378a8d65c62588c49b3d48cc127f184c7d2086ac65c7fb777a04a880fec1566b018fa2055b000
- SSDEEP 49152:mJAw8uPEAf7RDgbW6EpqPM57TJEq0aS6Nnpmmxah:aOuQ
- TLSH
  T10546E747E7B650D5E2BAC139A152B22BFC723495C738A3DB97814B061B61BE0ED3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistenceprivilege_escalation

behavioral2

defense_evasionexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy