Threat Database Trojans Trojan.Rozena.UE

Trojan.Rozena.UE

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Popularity Rank: 23,482
Threat Level: 80 % (High)
Infected Computers: 32
First Seen: April 4, 2024
Last Seen: October 17, 2026
OS(es) Affected: Windows

The detection of Trojan.Rozena.UE on your system indicates a potential security threat that requires immediate attention. This report provides an overview of the threat, its operating methods, symptoms of infection, and a step-by-step guide on how to remove it from your system.

What Is Trojan.Rozena.UE?

Trojan.Rozena.UE is a type of Trojan threat, which is a broad category of malware designed to deceive users into installing it on their systems. Trojans can be used for various malicious purposes, including data theft, espionage, and the distribution of additional malware. The name Trojan.Rozena.UE itself does not specify a known malware family but indicates it is a Trojan-type threat.

How Trojan.Rozena.UE Operates

Trojan.Rozena.UE, like other Trojans, operates by disguising itself as a legitimate program or file, tricking users into downloading and installing it. Once installed, it can create backdoors for remote access, allowing attackers to control the infected system, steal sensitive information, or use the system for malicious activities such as spamming or distributing malware. Trojans often exploit vulnerabilities in software or use social engineering tactics to deceive users.

Symptoms of Infection

Symptoms of a Trojan infection can vary widely depending on the specific goals of the malware. Common signs include unexpected changes to system settings, unusual network activity, slow system performance, and the appearance of unwanted programs or files. Some Trojans may not exhibit noticeable symptoms immediately, making them difficult to detect without proper security software.

  • Unexplained changes to system settings or files
  • Increased network activity without apparent cause
  • System slowdowns or crashes
  • Appearance of unfamiliar programs or icons

How to Remove Trojan.Rozena.UE

Removing Trojan.Rozena.UE requires a systematic approach to ensure all components of the malware are eliminated. Follow these steps carefully:

  1. Boot your system in Safe Mode with Networking to limit the malware's ability to interfere with the removal process.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system. This will help identify and remove all files and registry entries associated with Trojan.Rozena.UE.
  3. Uninstall any suspicious programs that were installed around the time the malware was detected. Be cautious and only remove programs you are certain are not needed.
  4. Reset your web browsers (Chrome, Firefox, Edge, etc.) to their default settings to remove any malicious extensions or settings changes made by the Trojan.
  5. Reboot your system and perform another full scan with your anti-malware tool to ensure all remnants of the malware have been removed.

Conclusion

Removing Trojan.Rozena.UE from your system is crucial to prevent further damage and protect your personal data. By following the steps outlined in this report and maintaining vigilant security practices, such as regularly updating your operating system and security software, you can significantly reduce the risk of future infections. Remember, prevention is key, and using reputable security software along with safe browsing habits can help protect your system from a wide range of threats.

Analysis Report

General information

Family Name: Trojan.Rozena.UE
Signature status: No Signature

Known Samples

MD5: 6a1c343bec9f0ae29f493a0a93206542
SHA1: 06511fbb522625b1b52d461ded9dec1e671d1ab9
SHA256: AB500AD2B80FA0994CC521DBDF2619F4910498CEF685AED0B58BD23A4E16988E
File Size: 3.58 KB, 3584 bytes
MD5: ce66f9ed97a7012448b6155cbf79d1ff
SHA1: 8ad4bb07655591b95c6d8029862e78a50838ece1
SHA256: B348D82D404247AA6CB18886B07C2A0CE364B3C779B58F0E456E3ACD3B1424B3
File Size: 3.58 KB, 3584 bytes
MD5: c821e682874487c24e4cd818f56c6b93
SHA1: 41e29f7711df6d0324e51e5dda0c99069377d2a4
SHA256: D054FEEC446B3D957AC695580F5EBFD49B8A030FF65B48052140A51E7589DF3D
File Size: 2.47 MB, 2468104 bytes
MD5: c8427c997faa16dbfcecf903ce9810c7
SHA1: e1153c513c21d262c934f36df1bccc45f55a78e3
SHA256: 9BFF48F114176A92E2E01374E8581E91FA52569EECEA5E6CC5DA1B07B66B0A9D
File Size: 3.58 KB, 3584 bytes
MD5: 34c8532a78aa2e0a67676f0c450848f5
SHA1: 5c8a8fee0bde80e03772fafa8872e7ced9a514de
SHA256: 29CFDCEC1473315DCA68AAF8AC5CFD61598F93D5B58DAE3BE9627FE3CA20A737
File Size: 3.58 KB, 3584 bytes
Show More
MD5: 3f642c2898e96e24912719c8787354e1
SHA1: d20cd393fd9ece41ac29c9537489156e98dd410b
SHA256: ED1D369F828881F4F40B7DEFFA05A6E802074907D93E01354A080E0E013CA4E7
File Size: 4.61 KB, 4608 bytes
MD5: 76a86c8b6ad976bcace13f836b0320e0
SHA1: 0e111e91108c303d94d8820b8c434ff17983b55c
SHA256: 2A9C16B7FE5A7A1EDA5AC040264E8A6975C4E01D43B7B4DC8A57B1077D29D4F7
File Size: 4.61 KB, 4608 bytes
MD5: a5e3e0fd0ae598fc88f0a600596162d8
SHA1: ba5cad134eee023e4644d0b12a75fd8ac8d27644
SHA256: 9C013B9A4F2568F88E075DD3BCBEE8C8FCF468B0A99D51C167D54806600FC633
File Size: 4.61 KB, 4608 bytes
MD5: 74aafcae56a21581c61978458f7d39e2
SHA1: e2e0763120c39e4c10e05a2b21a805e6288d0683
SHA256: C66E9D85DDD7BB98A60B1823E1CC7CB27035DA727744C03735317F2106DA80E8
File Size: 3.58 KB, 3584 bytes
MD5: 8321ee3ed60ccf7c4fa84d1c8e95be0c
SHA1: 31d7fd38bc07bc5160e0a4f57b82123f4e7b9ae8
SHA256: 27BCC30E9CB698C20BED734237DC3D929C34C70415AB79B90610AC698D768BF0
File Size: 3.58 KB, 3584 bytes
MD5: 4cb02268efcc515bb38575cb4a415e8c
SHA1: 4b407856f6fb002f15a8abe33d58e05d81b03a73
SHA256: EE91672EF0215E5FBDC1B6A3B61BB475FAFCC341D08EFBB24BD495A3AC9FCE91
File Size: 3.58 KB, 3584 bytes
MD5: b562df22a8cd1cde45efa606233fca08
SHA1: 1c9d49b2bbdf1d9751ceceace6dc9f7427ab4d67
SHA256: D24F553C61C49BA89743240D8905454F03F38BC637D031188DB5A698EB2F8051
File Size: 4.61 KB, 4608 bytes
MD5: 74232629ee278cf87c0f450be5fd3ca3
SHA1: 125e73d139021f732b44724b589805d6d096802a
SHA256: 424FFF9DF24E4ACE3B834D3FCB47FD57E27BC2A9A6E0E1044662531531BDAC9E
File Size: 3.58 KB, 3584 bytes
MD5: 03a378e1b97f44b0569d4e3155b1cc67
SHA1: 9f050288a8339f15481fa793ea9843c36ff0fd91
SHA256: 37B1A1BDF60E46BEB031A2E827CFDB562C4C57702216E68551A04326FD6F27E9
File Size: 3.58 KB, 3584 bytes
MD5: db8259ef3370fd01fd812647ea74fdc7
SHA1: fa663b2a2ba663a1142e2b6cd7c94e19896c9fab
SHA256: E254E3E89E3EC4DD29D88A4167DAD19F8EB6B5A53BBBA7566C3BEE0F8B1837D5
File Size: 3.58 KB, 3584 bytes
MD5: df3b60d22cf60a8b6d2343f1808ec011
SHA1: 3cc0542bef21ecdcc29e238ac553def8f26cf5b4
SHA256: D74EE8BB9337B8DD250CE28E0E8607680F83719A28906F6410AA4A6ADDBD720C
File Size: 3.58 KB, 3584 bytes
MD5: 24a08a52467ac3a957316f0b0587f23f
SHA1: 26d87ddf4d3b9777d03e84806644b83e579ce163
SHA256: 4585E1F71C39DAD8D45F217787799B6CACDFA7AFF259BC0B4C52ADBE268860A1
File Size: 4.61 KB, 4608 bytes
MD5: bb8bb6120224bbe4b6b34c297db633be
SHA1: d98ab13332f6f089882f5dfd8f95cbd623721b8f
SHA256: 3E7D4140D6032515C6D19B25EE836C522519935DB8B54D350020F94F744C5281
File Size: 4.61 KB, 4608 bytes
MD5: addf2a30e070456839d8a5562a26099b
SHA1: 8e20a60cc5fb53f7537eab1a393e5e100f574195
SHA256: 7B48FE33E58A1DDD1264ACE00BF155971622B7A94902418ED240A6CE6D5A7C39
File Size: 3.58 KB, 3584 bytes
MD5: 3d48f13ec5ee2f3a07d7583ab90a3f0d
SHA1: a4e1eb783aed363c0ddb5cc398445fa9a3466711
SHA256: 0EC8395FCB5F41C0AAB853F34958AF3A98E9F1C1195CE17B8349379A3D9C6AF3
File Size: 4.61 KB, 4608 bytes
MD5: 8d0dde73e322f8331e1776eca1bb5441
SHA1: 2194ba3289460ad9978d2739a6e99399294c7e24
SHA256: 0CE8828ACC59233BFBFBD0F47F58319910F253A7A09E4A43C83458CA15C25B84
File Size: 3.58 KB, 3584 bytes
MD5: 2bdf5a61e95cbc0de0baa06d515b2e9d
SHA1: 5591d5d884f391af607dc31a923a43334ee3db64
SHA256: 0E6E9C434B84FF0677EF98351366D2D2582FADE116E61310FC55C9B1D1FBAF14
File Size: 3.58 KB, 3584 bytes
MD5: e0fbc1bd024dff28a1aa803c1a152280
SHA1: 45d7074361d93dac6aad4bbb684b6bd16034c372
SHA256: 8918CFEF0721C8B834A01CADC245CBDC9669DB5A7E7E9A5CCA2120E2442327EE
File Size: 4.61 KB, 4608 bytes
MD5: 0ff1a12321c551f16dcd1ee77de2fd63
SHA1: 9c24eb1ad51ae2b419280b19985b3e0c77b7a216
SHA256: D15CEA4F9ADF09FAC25E8073340F59ADEC3D9DA2AAAAC7FD2CC24979F683B915
File Size: 3.58 KB, 3584 bytes
MD5: 08bf425354c05c4033727cf40d44378f
SHA1: d570a5c8f35c598a716809067de2deebad19d509
SHA256: F8C955715FF9A57F515446B80C43C49CE181FD3F52CFE4C4BCCC7D111019A83B
File Size: 3.58 KB, 3584 bytes
MD5: 424d4bcfd4574bdb5f4d34a6978bbcd1
SHA1: aee3717847503beed910c999faf8345c191c08b4
SHA256: C18F7F43B71B39A46F888FAB94408E07BBA9EF75AB1DE2146BEF9231705318F0
File Size: 3.58 KB, 3584 bytes
MD5: 604b0627a9b5462100bcd6fa5fa0dd75
SHA1: 5e3d5e30b376d98d65a9acf7bb6681e0e967c236
SHA256: 5EFCC11DD0C63FFD70C7E5C62EC113CCF34F560ED06E811B7ABD036542B1C6D6
File Size: 3.58 KB, 3584 bytes
MD5: fcf762b2562fd72f5679d74620eda07b
SHA1: 53c94eaef368ab6ec675f3b6102dfd9866a85bea
SHA256: 951AD97FB9095B03CF85689BAB67A32C8D22E21F09095FCE71D922FDD35578EE
File Size: 3.58 KB, 3584 bytes
MD5: 300b699cdcb734370f72331d7dec4444
SHA1: fe200c27f17fc8b772c9f40ada913d43bd8378bc
SHA256: 9CE8E6ED0C77EB573469D826CC752D284918AB4FA254ADF054FD3DE245DDF9D0
File Size: 4.61 KB, 4608 bytes
MD5: a84df813b761cea290f8e6022f842927
SHA1: 1784f23586a325b2d896bc8bd2c652fd0c971403
SHA256: E0B8E9E25228EF5A4F1AA0F0AE202C8B71DC47945DCC4A9D92A57395FDF03C7B
File Size: 3.58 KB, 3584 bytes
MD5: c980a2ac70bb125c5876f25756dc40a5
SHA1: dd1d39bf4dc08988407be585de7034e57c2a703e
SHA256: C2E32A520C475AF655981C9BFED046C3A5E35A15554972925CF032A2954C1F67
File Size: 4.61 KB, 4608 bytes
MD5: bad127a5edee7fd9912ad64f6c32a9f0
SHA1: f028878baba6059dae9a2c290e009243de35dd43
SHA256: C3C6F56BD4BFE3C957640B471C0017A9FAA62379B98ADF933DA3905C64C516BC
File Size: 3.58 KB, 3584 bytes
MD5: f1f6d272ad7130c12e5fb29d2fb26d13
SHA1: fbb5f51bf85508eb22f7bddee98cf34cf7a3f110
SHA256: B98FC9F0DBC61810287E77EA978665A0B762DCEEA927BBFFCEB63FB7005149B3
File Size: 3.58 KB, 3584 bytes
MD5: 180375662f313f8da02ea4fdd648beda
SHA1: 5a330081da65af00391e1862d6aa1f5898de9323
SHA256: 99D2D5DF3DA685E8960717B043D8332FB88BC832CA2E9C68AA3D4C8D1D18A336
File Size: 3.58 KB, 3584 bytes
MD5: 57a6476252c59f3462024288df70c36c
SHA1: 3dbebf7fab888a69e7d813c9c466e0fa0064b99f
SHA256: 3AD27038540E709FE71B51D70295D7CD94089224740750836A28353B6D465C66
File Size: 4.61 KB, 4608 bytes
MD5: 59043e711f39d035a0dfc894a948e81d
SHA1: f09722d3d46ec09a236a81974c13f89e55614580
SHA256: 19FF068A633D5BF3FD08F192014F55FDB4E18FC916C4D1246EE97D2F7A91BE31
File Size: 4.61 KB, 4608 bytes
MD5: 2250aa64b2afb8c4c568fd72676d9fc5
SHA1: 37a2e24499a7aefd60001e41472a53aebbd00e9e
SHA256: F840C6C7D0453D93154DD24A642EB820030B160E5B375CBC2DFEA63B6C49762C
File Size: 3.58 KB, 3584 bytes
MD5: e96d4af3d295cc1f2e07411c26758153
SHA1: dc66f24dcb9c159c8e5bebb53ce9c4bf7f9f974c
SHA256: 322F75A96B8489CE66F833CC61785E25E595A2CAC3BEDE7F7542C96CD6C45441
File Size: 4.61 KB, 4608 bytes
MD5: 65be36a8d0bc9fc1d33f06c06c81edd0
SHA1: 3a87befdd48e2aec8fe0ea93dbd2e3e4bd30beaa
SHA256: D3E8A9C00B37F1366F12587D2BE7E4B0F3DC9D8F9433EC9E3F8908E11426CA1B
File Size: 3.58 KB, 3584 bytes
MD5: 32a70be31090ba0959087e49ce7636c1
SHA1: 953ff6ff869705034de7f00465422aaa1370a5e1
SHA256: A2486C58FA96E1917B098785FE1106662FD27E711622517F49E565B96BD07739
File Size: 4.61 KB, 4608 bytes
MD5: d4ea6100192c9f449ea053d253433c61
SHA1: 85459cdf1d3c0d0ade6e6c1626b76f9f920e142d
SHA256: 1EFCC4319789B84E8DBD79AC257A68121E53DCBF8628E13B7691E18A4E49EE74
File Size: 3.58 KB, 3584 bytes
MD5: a495e57f6034af4c70eca5ff6e2677bf
SHA1: 62d902022f343fbc9e0a01d3da3b915cb9bc0588
SHA256: 5B221685012127569C0145184E326D65C7B311092E13D2E1CB063B09BE2A9A22
File Size: 3.58 KB, 3584 bytes
MD5: 3a9dfc463800562f46aeb869e4654cb6
SHA1: 295e6c0e550d03d7b7c2308fc0da9c5e47ebf1d6
SHA256: F7E67C3BFCEE9CD325706F49B71E4B1992A1F652EC253C96533C41D2946DFBDB
File Size: 3.58 KB, 3584 bytes
MD5: f822e13e1412bc88cd86813a8ef1a633
SHA1: 1fc3d2f31e418645f1cab8b9b7d8c02f204f88b0
SHA256: 63FBBA458B97C088FB010F3EDC2114AA3EBC7680B2F977E1E3622FAF349AC4B7
File Size: 4.61 KB, 4608 bytes
MD5: 24ff19cccaad98a3b18adc1e22493687
SHA1: 6dfa8caf67629a0833db7b753622c17ed8013523
SHA256: 1987ABCFD3A4C0B0929D2C2295255543EEACD2FE641B47E065F30D59EFBBD5DB
File Size: 3.58 KB, 3584 bytes
MD5: 65358692fcef7a5616b0eaa3aacd317f
SHA1: 0855576ff1009632d826702d109dd20994eb1921
SHA256: E90612572911324615788F50DF787658E32E6F81DA2830564CAF8172C70F34D9
File Size: 4.61 KB, 4608 bytes
MD5: 4dac2486f1fd4fb52e30bdb9363ef2d5
SHA1: aac680ac69899d48ca7782cbc85e9afa42dd122d
SHA256: D4813F0D21891E986F9BA6EB66376E0EAA829FBB3C0DE6B6A3866307C6FBF1D6
File Size: 3.58 KB, 3584 bytes
MD5: df61d6a07b365fe755f00ce4e1133121
SHA1: f340f43861efb4eac5202527ea8a624a6307c237
SHA256: A3AAB95C1115B6C31FFD0E2BD6280EBD04654C1CA067D953E42E5B49770C9480
File Size: 3.58 KB, 3584 bytes
MD5: 5d9b56e2e7b0d155eaea9602c8db7358
SHA1: ef399d8964f744196aa6f5f3363f1359285bc1af
SHA256: D2F5C40128718130F164C3E2423BD2FB346C8C6BA7B7E0D08CAF2B0F77840308
File Size: 4.61 KB, 4608 bytes
MD5: eea702061ee4f9b19253bb8eaaabeabf
SHA1: 27ae4b2355dbba461f128149f0b73fbb867acbc4
SHA256: 52ABC9147A543F7D70B68446A7DB22DC19C7FB416DCC5F9DAE71E1236905A2ED
File Size: 4.61 KB, 4608 bytes
MD5: eea8b307d0c13b824ca3ae4e993c49d6
SHA1: f53cd43c873db86b84ceb674332f631a716cab01
SHA256: D4A070F275F2C2C8EDA1C0CE65593719A03DDDDFA2EA46C34717B371BC369512
File Size: 3.58 KB, 3584 bytes
MD5: 7b12758dc882fae5cab3ba0b8e9e1138
SHA1: 2911784d62b8530c47d4df7afbcf4abca510a2a6
SHA256: EDE71250FCCC75B53209AE445E6A8242986C3CE9F86FFD2221397DF71255A675
File Size: 4.61 KB, 4608 bytes
MD5: 8849cdc75ee421851bf35a3c13d34239
SHA1: 294e9f0eafac80091b4bb2137f55e0c6c53ec1cb
SHA256: D77359C55E724E101830B1365742A3243DAA1743AE152B82E5266E736C4B445A
File Size: 3.58 KB, 3584 bytes
MD5: e589e595e46ac05cae0b5ea0f63027b7
SHA1: 957564dfc5d8c9d6ae0d49b4c425845bca54f87c
SHA256: D9A33E7A61077076AA35065266E51C3126C23D1DB3E6F0AE98293D3626644C5C
File Size: 3.58 KB, 3584 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have resources
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
Show More
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • big overlay
  • No Version Info
  • x64

Block Information

Total Blocks: 3
Potentially Malicious Blocks: 2
Whitelisted Blocks: 1
Unknown Blocks: 0

Visual Map

0 x x
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • Disabler.X
  • Rozena.UE

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAlpcConnectPort
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcCreateSecurityContext
  • ntdll.dll!NtAlpcDeleteSecurityContext
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtClose
  • ntdll.dll!NtCreateEvent
Show More
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateKey
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtNotifyChangeKey
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtTerminateProcess
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtTraceEvent
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWriteFile
  • UNKNOWN