Helper, Comment administrators, rollback
577
edits
MrsMajor.exe: Difference between revisions
m
no edit summary
Nemesis6051 (talk | contribs) mNo edit summary |
Nemesis6051 (talk | contribs) mNo edit summary |
||
| Line 1: | Line 1: | ||
{{#seo: | |||
|keywords="MrsMajor, MrsMajor.exe, BossDaMajor.exe, MrsMajor2.0.exe, MrsMajor3.0.exe, Elektro Berkay" | |||
}} | |||
{{Spoiler}} | |||
{{Infobox | {{Infobox | ||
|title = MrsMajor.exe | |title = MrsMajor.exe | ||
| Line 14: | Line 18: | ||
==Payload== | ==Payload== | ||
===BossDaMajor.exe=== | ==='''BossDaMajor.exe'''=== | ||
Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads: | Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads: | ||
Start to CRY! | Start to CRY! | ||
| Line 27: | Line 31: | ||
A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | ||
===MrsMajor2.0.exe=== | ==='''MrsMajor2.0.exe'''=== | ||
{{Infobox | {{Infobox | ||
|title = MrsMajor2.0.exe | |title = MrsMajor2.0.exe | ||
| Line 72: | Line 76: | ||
If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one. | If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one. | ||
Then, the trojan triggers a [[wikipedia:Screen_of_death| | Then, the trojan triggers a red [[wikipedia:Screen_of_death|Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre> | ||
A problem has been detected and windows has been shutdown to prevent damage to your computer. | A problem has been detected and windows has been shutdown to prevent damage to your computer. | ||
| Line 92: | Line 96: | ||
</pre>When the user restarts the machine, it will display the RSoD. | </pre>When the user restarts the machine, it will display the RSoD. | ||
===MrsMajor3.0.exe=== | ==='''MrsMajor3.0.exe'''=== | ||
{{Infobox | {{Infobox | ||
|title=MrsMajor3.0.exe | |title=MrsMajor3.0.exe | ||
| Line 120: | Line 124: | ||
The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor. | The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor. | ||
If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a [[wikipedia:Blue_screen_of_death|Blue Screen of Death]] (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | ||
I own not only your thoughts | I own not only your thoughts | ||
but also your machine. | but also your machine. | ||
| Line 133: | Line 137: | ||
==Notes== | ==Notes== | ||
<references /> | <references /> | ||
==Showcases== | ==Showcases== | ||
| Line 144: | Line 144: | ||
<youtube width="320" height="180">-a12fxEOuU4</youtube> | <youtube width="320" height="180">-a12fxEOuU4</youtube> | ||
</div> | </div> | ||
==Link== | |||
<u>NOTE</u>: the following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]]<font color="red"> that will harm your computer!</font> | |||
*github.com/NotReal96/Malware/blob/master/MrsMajor.md | |||