ebb5f683e6d267b42d16caa3274f49f30f952ec056fce76351343ce5b083ea9a | Triage™

Login
Reports

Overview

overview

7

Static

static

3

UltraEdit/...32.dll

windows10-2004-x64

3

UltraEdit/...32.dll

windows11-ltsc_2024-x64

3

UltraEdit/SftpDLL.dll

windows10-2004-x64

3

UltraEdit/SftpDLL.dll

windows11-ltsc_2024-x64

3

UltraEdit/...32.lnk

windows10-2004-x64

7

UltraEdit/...32.lnk

windows11-ltsc_2024-x64

6

UltraEdit/...dy.dll

windows10-2004-x64

3

UltraEdit/...dy.dll

windows11-ltsc_2024-x64

3

UltraEdit/install.js

windows10-2004-x64

3

UltraEdit/install.js

windows11-ltsc_2024-x64

3

UltraEdit/ssceam.vbs

windows10-2004-x64

5

UltraEdit/ssceam.vbs

windows11-ltsc_2024-x64

5

UltraEdit/...mn.dll

windows10-2004-x64

3

UltraEdit/...mn.dll

windows11-ltsc_2024-x64

3

UltraEdit/uedit32.exe

windows10-2004-x64

4

UltraEdit/uedit32.exe

windows11-ltsc_2024-x64

4

UltraEdit/...le.vbs

windows10-2004-x64

5

UltraEdit/...le.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
ebb5f683e6d267b42d16caa3274f49f30f952ec056fce76351343ce5b083ea9a
Size 1.7MB
Sample260813-fxqtfa1tgt
SHA256 ebb5f683e6d267b42d16caa3274f49f30f952ec056fce76351343ce5b083ea9a
MD5 9e0f67d4ae3ae991c375c2e4739f3fe9
SHA1 fa619448c7e6fd2d9301cac41236fcc4b3936e97
SHA512 20059b20ff27d614a42ee7bda87d0b3ceb5076b4aebfc4c5246ff778ad633c724bd58cea0ba7d256bd9bc4dd70d9736fa65fdf235019bbceb845216a140358f7
SSDEEP 49152:5+wS+S8crjaRN9/pwvsgxwxkwXJV8YOczImeo7+E:5+ocrjaVC3yxkwYyIg+E
TLSH
T14885335EF5387353CE6D48B559BA421C022FC5AA8E10F7ACC4C7016FA73DAD9E609B48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

UltraEdit/SSCE4332.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

UltraEdit/SSCE4332.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

UltraEdit/SftpDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

UltraEdit/SftpDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

UltraEdit/Shortcut to uedit32.lnk

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

UltraEdit/Shortcut to uedit32.lnk

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

discovery execution

Behavioral task

behavioral7

Sample

UltraEdit/htmltidy.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

UltraEdit/htmltidy.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

UltraEdit/install.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

UltraEdit/install.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

UltraEdit/ssceam.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

UltraEdit/ssceam.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

UltraEdit/ue32ctmn.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

UltraEdit/ue32ctmn.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

UltraEdit/uedit32.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

UltraEdit/uedit32.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

UltraEdit/wordfile.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

UltraEdit/wordfile.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  UltraEdit/SSCE4332.DLL
- Size 111KB
- SHA256 a5c1ebb41b37459a48cb2e61488dab52535cb25a44ee76b5c58007149ba3ec47
- MD5 44c95094636c0994db1a29bf7e7f9759
- SHA1 083e2f63d7c35a545c74879b314258659e18158b
- SHA512 df42bdd01026ab5de30fea4661e4642964a501d8a0c362f2f5e307ad376f00fdc0d16ac599c9c2cf39261f7fb8cbd40291d10ee236ab43efc57515c9b2a6d073
- SSDEEP 1536:DAuRoeJUWrcvFkv1sIaLlE/nvhoWfqa76PmU1toemW4IBSoItD1Fu6gCRJVfIFAP:EOoHkv+DPdtoRDISFu6dRJVfIFANt
- TLSH
  T14BB37D92B2A3C2B5E1E049BD01E12F3A6E77BE145B26C1C35B90ED3D98355D08C3976E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  UltraEdit/SftpDLL.dll
- Size 508KB
- SHA256 67586923b2b8dabbfa858f1fac9ba6202a1903572202e8ed0ddf78a146dcdb06
- MD5 9296bbb1ca107121b1a019bda382c587
- SHA1 dca298a5d6d8380957dd45a541bfebb4e6d5915b
- SHA512 570af8674f94040e3bd841ff1106a2df83e975d328bee79b495d0c5d9f5714bf19c39f9a577122e2625d92de1837f28916908742ee2c4c2bf6f90c3b51212011
- SSDEEP 6144:MfxZx36Mnc9U/OEoAagTuL1vrxmjP4KQ+yeM/oQ9ua4J9U3gDxjvx4:KcDH5W21mjPuKMVufT
- TLSH
  T180B47C736E8306F1EF5A0A35107A6F3A8A3466720579E642F371CD93FB231D1A9392C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  UltraEdit/Shortcut to uedit32.lnk
- Size 498B
- SHA256 456bfbadb34e57adf9b915f786bd6a3433f3c3d575ed4ff84f1570de8d25523f
- MD5 2e9e7446e90c4f5b6dd94a56bc857b1b
- SHA1 0b6fb03d5c432232ee72b341007236c6a318fb33
- SHA512 a9c656383e5bd55eef1a2df5675f2f3c994dde975358d991dc04169e5d9376b5a5056917fada9f22cf44e76f54964e2e2fb32dbe7d62fe4247d83413e475a1e0
- TLSH
  T104F02B231BD40E42D6BB82301D69AF12DA96749A8F0AC68F0CC9091B5875310291D95A
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  UltraEdit/htmltidy.dll
- Size 176KB
- SHA256 54237b1f5299750bfdd92dff00006be37195790c6b4817ab040347ba9bf68571
- MD5 8fb35856edb1cbb983bc01a2798abd43
- SHA1 2b634e3b4a42b1e5b5b3d2952a24881e2aec14c2
- SHA512 6b1e94d62781ac3e7eb53fec0ba96299ee38b5be5b36ff3c09395ffa877892f28ab4a547d1567b32fa394dc6025a1ad6f266affa454e96b76449b5363d7636d8
- SSDEEP 3072:uIx6Hasds98lDoCWy/OvrUoT6lS2FixY2QGNLNKoxEy+xFs9mDcNkY:Cfds2Nx+rUoT6lS2KLey+xFamcP
- TLSH
  T19F04AF117DF2847DE9EC827128B51B25EFBD6830DAF5CCC78B1958C01E34691AB3A647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  UltraEdit/install.sss
- Size 6KB
- SHA256 af35538e1e67b553f1cda6b6ea757ab3971135c839d69120a84607764fa9478f
- MD5 4ce0eb2d34ddfb801f5ba7acff09c744
- SHA1 804b4155659f8a175d454cb19b16e25db1288d47
- SHA512 be845ae15e7e75556be85856767661b0e5e529db5a6a573571013f1f23a9fdd70585dfd058d1e0fd241f6cfdb535ce907e1cbc2d71aa9a2698e7e72b6c673393
- SSDEEP 96:3l3+HEwia9b+f9dIpdYdCfuT1GivMApIgCt:3Z+Hk33IzwCfIf3Ct
- TLSH
  T1A4E1AE22B445AE461A0F6B7B0F9D3982241E6CFA164C60C889EFF4378377B14275BDD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  UltraEdit/ssceam.tlx
- Size 7KB
- SHA256 45836f2ffa1d6e9f885153baf80f92fa69c794d4d9cbe8efda98617ca20d7d58
- MD5 6fd246dd792d583c6ba97d77c02f4524
- SHA1 99ee6f099ffcdbf80ae22cf9d8190cf3fce5c6e5
- SHA512 4939dae8f2f948a81483a26a742d5010d24b84bf7021f59c8a297eb9d17fe8e945792965eec8538ce9384ac445c7f895fe1a146f1d80996a3218a605ca4c249f
- SSDEEP 192:ewMnFKmCVDjRhVzgWfxLJyaFnHVQWsigH:AF9CRjRhVnyalA
- TLSH
  T181F143BDA2E3909B5DFA37D941117892F12C90419F573A086A8B75EE304BC7C6B04B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12
- Target
  UltraEdit/ue32ctmn.dll
- Size 18KB
- SHA256 399eb7dcf9a3ef044bc6f71ccd993fa4c960398400afa8f2a004bce9978d35c9
- MD5 e46d36288ea09b9fcab98bbd749a8db3
- SHA1 e193050c6577b462404e284d6a51fd5a3ffc3e2b
- SHA512 f866da69a3f664d5a9ecf8a44a42f785c78ac91d4c89ca6d4c22532a43eb1de350d1a4ea7242c9514e3d498a4f1ed0e4b4fb662470d5ae5c7c42f3c68705d643
- SSDEEP 192:cC/9FlWBkSpbaq0IedqUTlUbck1QEETTNVlqV0wCjEh3yYhMk8JJLh5HlRa8/4:Twdh0Xdcw8QF8GwOEhMNzLTFZ/
- TLSH
  T122820A53FB9B55F2D1B9497080661B3BA237BF61D7D641C38F5234BA58782C0EE3A206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  UltraEdit/uedit32.exe
- Size 1.9MB
- SHA256 d0aed3ea4eada1413b9eb2d1884be3eb7e5558b203cff3b3425b19ada09c3ea8
- MD5 243d9cc4d7e477f1b1856c57c4f05203
- SHA1 b3b39c8e95aeed6f40bba28f32a8f6b8f2d7d47d
- SHA512 b841aac870e61b076add229cc3e4b7854d3a9d61628ab2940fafc8a9c5a5e51ce70a6d182823b1dd260791483570d0c32f3f3eaa85ea0de882ca76afbb5620cd
- SSDEEP 24576:mycYf3qICFA8guyX5zhdTZ2lqROvWqBViGD+b4FeICFG:mNIos5zz1ROrLiGD4Qe
- TLSH
  T1DF957E12F2F38026F1BB56308ABA076496B5BE719C37459F2F912E1D1E70E42DD11F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  UltraEdit/wordfile.txt
- Size 75KB
- SHA256 56e4569aaef1364dca6d5c0756c0855363160907bfbabc3259d7e48fdd874969
- MD5 54a1d63d9086e3b4d911940f1a7f231a
- SHA1 90dcca8b178192c40a3de3249bd7fac0ca12f510
- SHA512 f67f291e578e8fcabf797cfeba91a08b3155913555843903640092102898ff8342b36f2ff3855c4afcbc6a82a09a0767b0bc3fea9a8330dd665fc6cf0601e11d
- SSDEEP 1536:aQ9fpH8rjckS7oJIRLwgKGHHEg3gwYqEyOqlOm3tNbczKTeyoU90Dp/6/17oPwcL:aQKjM7bogAyOqlOm3tNbczKTeyoU90DF
- TLSH
  T1A4737D1D98905DA348D742A6F53764536BB101888715E260F7E8CA5C2CC89DEE2FF7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoveryexecution

behavioral6

discoveryexecution

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy