d913c8630aed1d7262a8f782ec3672892419841264b7d2017fc6400b3128a9df

Resubmissions

27/08/2026, 16:35

260827-t3xqtsad448

27/08/2026, 16:11

260827-tm8s6aac645

Sharing

Copy URL Twitter E-mail

General

Target
grim.zip
Size 154.2MB
Sample260827-tm8s6aac64
SHA256 d913c8630aed1d7262a8f782ec3672892419841264b7d2017fc6400b3128a9df
MD5 9e9627862dea5f60eced0012a3e6c409
SHA1 3ba9366bc92f1a361711fa5ce629c5fc067bd07d
SHA512 464f8159f961dea04dcee072dedfda546f40b2ad3ffde432ab62d7e95af35931e0679553a7346e6510534987570fc1753f597946b79f0cd9fc2285dc4228157d
SSDEEP 3145728:IoVRpYjyrF3JnhLuHBk9BBeqp6qnZuoFxspHN0DGLEabw20ElNpNP6YqbCSoqYU6:DVRpp3/LuHBYx/ZREHmyHw2Ppd6Y0CSg
TLSH
T1DD7833B871F842D67A1BF167947B56517EC0A0D183E6EF27733E2110288258DFF690AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution ransomware

Malware Config

Targets

- Target
  grim.zip
- Size 154.2MB
- SHA256 d913c8630aed1d7262a8f782ec3672892419841264b7d2017fc6400b3128a9df
- MD5 9e9627862dea5f60eced0012a3e6c409
- SHA1 3ba9366bc92f1a361711fa5ce629c5fc067bd07d
- SHA512 464f8159f961dea04dcee072dedfda546f40b2ad3ffde432ab62d7e95af35931e0679553a7346e6510534987570fc1753f597946b79f0cd9fc2285dc4228157d
- SSDEEP 3145728:IoVRpYjyrF3JnhLuHBk9BBeqp6qnZuoFxspHN0DGLEabw20ElNpNP6YqbCSoqYU6:DVRpp3/LuHBYx/ZREHmyHw2Ppd6Y0CSg
- TLSH
  T1DD7833B871F842D67A1BF167947B56517EC0A0D183E6EF27733E2110288258DFF690AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  README.txt
- Size 876B
- SHA256 8142157c8f584d8f22101e8c06030270777535ea04696c19d60d95092b24cbcc
- MD5 c20ad556d5180bbdac56255b9e14f012
- SHA1 9c886978dc7d2df229e2d4e9c0cebd136d4175c8
- SHA512 ebe13845326d9e867b8f84674b23bc2e41919757cf8a651efa5216f5b061484d59795409f7be894f7fa9249ff2f890e43f33f11b7c6f0d2f89c201f9791ec554
- TLSH
  T17111CC111B9835FF0200E1739800652CA9F28DFE7A6F57CB1950749C39F1008936F209
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  fabric-api-0.139.4+1.21.11.jar
- Size 2.0MB
- SHA256 3d379228d2b966956b227781c5db2ac8ad89428d4e1f98787baca332a97e9c5e
- MD5 65199b2bf0ca83d9241599563c6280af
- SHA1 c0d3aa489c6c2f8806f236b3580e776da30a1c85
- SHA512 871f5da6dae20095583ac6a871ee13e34151e458a1dac70d3a3de46982464407b0f7af921a3286fede46f27cc2378299ed1c937fd6895f75428445f46d33e4af
- SSDEEP 49152:xSyv5CjI1HQx8GsxHh0j62iaqM43fi+LcnDlnBQElysjlv/J15eJY:N0jI1wfUBba46GcnBnB15nT6Y
- TLSH
  T152A53325E7B0B5ECC343F67688D2645CF255F9C97B481B3661B0041498A8EDFDA0BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  instance/mods/fabric-api-0.139.4+1.21.11.jar
- Size 2.0MB
- SHA256 3d379228d2b966956b227781c5db2ac8ad89428d4e1f98787baca332a97e9c5e
- MD5 65199b2bf0ca83d9241599563c6280af
- SHA1 c0d3aa489c6c2f8806f236b3580e776da30a1c85
- SHA512 871f5da6dae20095583ac6a871ee13e34151e458a1dac70d3a3de46982464407b0f7af921a3286fede46f27cc2378299ed1c937fd6895f75428445f46d33e4af
- SSDEEP 49152:xSyv5CjI1HQx8GsxHh0j62iaqM43fi+LcnDlnBQElysjlv/J15eJY:N0jI1wfUBba46GcnBnB15nT6Y
- TLSH
  T152A53325E7B0B5ECC343F67688D2645CF255F9C97B481B3661B0041498A8EDFDA0BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  instance/mods/offline-client-bootstrap.jar
- Size 18.9MB
- SHA256 9dcb8180a206528d25f6ee1707730ea7f53099e4f4b13cf283be62c24c8b9c02
- MD5 c5f91ce1126fae84121569b8d9c398cb
- SHA1 9af0c0dd6957aa788799336d1b7d20fa1f8cfa83
- SHA512 b3fe3b4ce7884d63929f40519f44fd42b48323700b4ca77196d9f6f7787f1d8c54a4f5ad6b95bf758b0a2f4766e6f55eca14bb5cf5fd7981fed82200f6370f0f
- SSDEEP 393216:RT1hj9l4jgepTl62MJ9+JD8qb7qkAoCgn32TmVYFd:LJ9l4jgeLtMJ0J40q2CgnGTQYFd
- TLSH
  T14617337AD4FD909BF904A977181B1E815ACE80D2D3FBCF65F36E32584E81E49D22819C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  offline/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  instance/options.txt
- Size 4KB
- SHA256 368fd778ad416b2790388d2b1ad0acabc20a480302372da145ebf7ed20133eb6
- MD5 9f0ecf90af2e6609479c412598d1d4d8
- SHA1 6c32b86a7eec42b7c25b84c8eb3b45743646cc80
- SHA512 2baa60cc9d29cd71b2ac40ebcafada000b007e913ced409e3daffe178131de1383360929eb9d4fa04acd3318d6fd03a63368cebc732a125ce9338f7fcf19bb65
- SSDEEP 96:NySZ1dWoxNADHZujBOS3YBFhLbY3PyNbnUwiUQ4H6wDu/DLDhD53jCDa2jsDUGWO:oA1dzADHZo3YBXbY3PyNbnUwiUQ4awD4
- TLSH
  T1B2A1A7146A2EFCA8CAC63506C484F532265004796DCABEEDF21D19EC274750C86FBE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  instance/usercache.json
- Size 425B
- SHA256 e03806a45a6af9b1af56b4c932f528a9978a265f11912b875f4783a9c9b27762
- MD5 133c260c38767c63a70e1bc8e4f74f23
- SHA1 5a9256f6884d6cf39eab834f074815a4b5681193
- SHA512 3737ca13ac5dceb2af7bbedd2b81ebb9b9a26ab4bfc0b1c4775f587f119aa642e22d6c46e107dcef97792e2a20849b98867eea13ee54ecfced213c8517239bc7
- TLSH
  T177E0E58B33A0287A1C08BF6B83433AD9B9013512C698BCAF22669A05084483394F3524
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  launcher.exe
- Size 12KB
- SHA256 7c3d88a3d34e4ec6baeeae47e124c656c1e41b24025f756e60239a2bdca4e157
- MD5 b167d5f736339a2d64d0cf5e8982b737
- SHA1 36758f384b17e72efc666fa71d580393b5a6db81
- SHA512 bd4de0b5583ba5dcee5a8a82c534a86dce79f6d124a652bbaf5bf3a1d0138e9e688a0fd558af415b0b7723fef25e6566534ee8c35ee405d9ba900d779e271825
- SSDEEP 192:I6X09BFzBOjHcIx1M+qt+U4+v+8lHU5n3W3yPY:I6XzHbxa+qtKKc5n3WY
- TLSH
  T11042850833F80A18F1BF6B3A9EB146211B36BE5B5A35D71D19A2458E0E71F408C96F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  runtime-args.template.json
- Size 9KB
- SHA256 7b06f2dd3dda6a68c803930af8882390a535ff76c021ab4b86c52064fdc58273
- MD5 869dbba4dd4e237c3ca5799ca9035641
- SHA1 a66b45108d051b083ac707c54ff0029ed870f61b
- SHA512 a89d7f5cfafdf6184e7f0d3689aabee745668487d656ca72094fe664f4afd06152a83d0a7e458d08976cd18b5d9ade3aae37dccb6bf0b398e7829cfcfc861e60
- SSDEEP 96:NDRFM57ha3BUy2P6c6dteVCC6MY2eKc6qHkOHRw3xyx9x2xCAwh1po:pyVa3B/2P6c6EOHRw8hpo
- TLSH
  T1B9228F31EA08BC45B3F75D19A2A4D90E643E0BAFBD64B2F491E4B24639FB5861701373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  runtime/native/exit-hook.dll
- Size 104KB
- SHA256 670b05a5abb07190bd422dedee776fc37859cc6b1d9422cac9d5677b7aa4a5e4
- MD5 474c837c3f7db30c179e296d37b08a91
- SHA1 6e11f8914988af74ea2237be980a6ffe9b9136f5
- SHA512 94837cd47875662a2ceb8bf85945a6ffbc194a1e0dff1e7067c3d6ca50abd16d865f35ff8b0a984cb950e6ccd04e89faa914349b7413111aec4fb1c77481bec6
- SSDEEP 3072:XEMWPKlSVZAGrQAOUaGLN0vuNYmSO/2nePGyufbHDvr//8o7njWmAtpFrpcLmuAM:XElVyGsIRLN0Gedk6
- TLSH
  T16BA35B5B63EA00BBE277863885A30A09D772F8554761AFEF43A0065E1F233D18D39F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  runtime/native/jna1.21.11
- Size 279.4MB
- SHA256 9403e1fdd549fb34076c62d0cf92cfb4f23d99dc7e8ff5b6f9b4579c7bb72b2d
- MD5 463e0e1882d309b2e1fd37c07c6c0fc0
- SHA1 f29b52533bd6da0cb4581d6877aeed4524db640e
- SHA512 77aa423c078f082070bd74eef8d8fddcbc2da65afa8ccfbb7b47c8abd6d2662c5e10c5fd75552c22e153b9ad3ea067e1be9f154624f36723235f7bb4086d0dc9
- SSDEEP 3145728:HGYhZO8yqdK008ARKcuURFGtGfifFLDo:mY77yqdK0MRDh1
- TLSH
  T117E808BBD4D0C5E5C47FB03C96BA1B0A9C957A0C7974B5DB5A3320222D23ACFD985C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  offline/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  runtime/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  start.cmd
- Size 80B
- SHA256 56a0ea13ec5042c6372a3ac15ac960865275dbf320a097f0adf3a9bfd4e6bc79
- MD5 96ab32cf04e130cd908217b3f5a26476
- SHA1 3132c32724b88e5ac11e6b3d7f931cf8dcb71b04
- SHA512 b353e3dc33426e7c3787df47302aa996329e9127d418e1c9e02cf3f55965d257d9160f36d659e98953dd01ae0b44ea19e1ebb130bee681e7fb85fbb8f69ec536
- TLSH
  T164A012A2452C508494112602A08D00B6541904538128B25090201140584D042CD0E901
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30