Helper, Comment administrators, rollback
571
edits
🏳️🌈Happy pride month to all ppl.🏳️⚧️ --Screamer1234 (talk) 17:03, 31 May 2024 (MST)
MrsMajor.exe: Difference between revisions
m
I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky
Nemesis6051 (talk | contribs) No edit summary |
Nemesis6051 (talk | contribs) m (I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky) |
||
| (7 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
{{#seo: | |||
|keywords="MrsMajor, MrsMajor.exe, BossDaMajor.exe, MrsMajor2.0.exe, MrsMajor3.0.exe, Elektro Berkay" | |||
}} | |||
{{Spoiler}} | |||
{{Infobox | {{Infobox | ||
|title = MrsMajor.exe | |title = MrsMajor.exe | ||
| Line 8: | Line 12: | ||
}} | }} | ||
'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') | '''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') are series of [[screamer]] [[applications]] developed by Elektro Berkay. The trojan gained notoriety after YouTube user Siam Alam created a showcase video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel. | ||
According to the description, BossDaMajor.exe originated in Turkey and was created in 2017. | According to the description, BossDaMajor.exe originated in Turkey and was created in 2017. | ||
== | ==Payload== | ||
===BossDaMajor.exe=== | ==='''BossDaMajor.exe'''=== | ||
Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads: | Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads: | ||
Start to CRY! | Start to CRY! | ||
| Line 27: | Line 31: | ||
A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | ||
===MrsMajor2.0.exe=== | ==='''MrsMajor2.0.exe'''=== | ||
{{Infobox | {{Infobox | ||
|title = MrsMajor2.0.exe | |title = MrsMajor2.0.exe | ||
| Line 37: | Line 41: | ||
}} | }} | ||
Upon execution, MrsMajor2.0.exe presents the user with an [[wikipedia:End-user_license_agreement|end-user license agreement]] (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload. | |||
First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart. | [[File:MrsMajorWarningMessage.png|thumb|The warning message that appears before MrsMajor2.0 executes its payload]]First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart. | ||
Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself. | Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself. | ||
| Line 72: | Line 76: | ||
If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one. | If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one. | ||
Then, the trojan triggers a [[wikipedia:Screen_of_death| | Then, the trojan triggers a red [[wikipedia:Screen_of_death|Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre> | ||
A problem has been detected and windows has been shutdown to prevent damage to your computer. | A problem has been detected and windows has been shutdown to prevent damage to your computer. | ||
| Line 92: | Line 96: | ||
</pre>When the user restarts the machine, it will display the RSoD. | </pre>When the user restarts the machine, it will display the RSoD. | ||
===MrsMajor3.0.exe=== | ==='''MrsMajor3.0.exe'''=== | ||
{{Infobox | {{Infobox | ||
|title=MrsMajor3.0.exe | |title=MrsMajor3.0.exe | ||
| Line 120: | Line 124: | ||
The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor. | The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor. | ||
If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a [[wikipedia:Blue_screen_of_death|Blue Screen of Death]] (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | ||
I own not only your thoughts | I own not only your thoughts | ||
but also your machine. | but also your machine. | ||
| Line 133: | Line 137: | ||
==Notes== | ==Notes== | ||
<references /> | <references /> | ||
==Showcases== | ==Showcases== | ||
| Line 144: | Line 144: | ||
<youtube width="320" height="180">-a12fxEOuU4</youtube> | <youtube width="320" height="180">-a12fxEOuU4</youtube> | ||
</div> | </div> | ||
==Link== | |||
<u>NOTE</u>: The following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]]<font color="red"> that will harm your computer!</font> | |||
*github.com/NotReal96/Malware/blob/master/MrsMajor.md | |||
{{Maliciousnav}} | {{Maliciousnav}} | ||
{{Comments}} | {{Comments}} | ||
[[Category: | [[Category:Malware]][[Category:Malicious scripts]] | ||
[[Category:Malicious scripts]] | |||
[[Category:Applications]] | [[Category:Applications]] | ||
[[Category:Regan MacNeil]] | [[Category:Regan MacNeil]] | ||
| Line 155: | Line 160: | ||
[[Category:Other makers]] | [[Category:Other makers]] | ||
[[Category:Other scary images]] | [[Category:Other scary images]] | ||
