203da80c09fd83fbb0c6d7cae857b1040ffbd665f4d8332c9a5b761b62f9724a

Resubmissions

23/10/2026, 14:05

261023-rd28xab1517

23/10/2026, 14:04

261023-rdq6msda587

Sharing

Copy URL Twitter E-mail

General

Target
vtfedit.rar
Size 2.1MB
Sample261023-rd28xab151
SHA256 203da80c09fd83fbb0c6d7cae857b1040ffbd665f4d8332c9a5b761b62f9724a
MD5 f83cb8125a140a47b093421737cd026d
SHA1 f91130fba1feaea634c2833323d27703b71c0972
SHA512 25208a6dfc3606e8cbdea86d8980d39e0728bd8562cc84fc2b316f9a09e9d312048869796a4dedd783c29c6007539a1e029adceae44587cf153e2e974d0a012c
SSDEEP 49152:XLIXyDJOYH2Z7GDIXVeF5LZsihowO26aYl0m8xoJe:71n/0Xg92vJaYf7e
TLSH
T169A5333DBBCA77DA2188F68499D421378DF9B8D05B9CDD113319C4A2C28C512BA7B27D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  vtfedit.rar
- Size 2.1MB
- SHA256 203da80c09fd83fbb0c6d7cae857b1040ffbd665f4d8332c9a5b761b62f9724a
- MD5 f83cb8125a140a47b093421737cd026d
- SHA1 f91130fba1feaea634c2833323d27703b71c0972
- SHA512 25208a6dfc3606e8cbdea86d8980d39e0728bd8562cc84fc2b316f9a09e9d312048869796a4dedd783c29c6007539a1e029adceae44587cf153e2e974d0a012c
- SSDEEP 49152:XLIXyDJOYH2Z7GDIXVeF5LZsihowO26aYl0m8xoJe:71n/0Xg92vJaYf7e
- TLSH
  T169A5333DBBCA77DA2188F68499D421378DF9B8D05B9CDD113319C4A2C28C512BA7B27D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  vtfedit133/GPL.txt
- Size 17KB
- SHA256 19404e184cf45ec991b54e1e6f05f847ad8f13fee2a51f3a2d9a960c8f7cb26b
- MD5 fdafc691aa5fb7f8e2a9e9521fef771b
- SHA1 1e492d0d7c3ea5c426d38ef46715fb6e30f9988e
- SHA512 002415576d891ac85a2450b13a3e6db7e0e7651c261fc4a87a96e0d69e2135d27b513895af195b465bb79872fb9cce8aa1284d37cc543a10a0754f687ac6de65
- SSDEEP 384:9q2PmwEPb6k1iAVX/dUY2ZrEGMOZt7o0sDx2:9zuVLiY+rTZo0sDx2
- TLSH
  T17682A41E770543F20AD202916A4B68DEE32ED4B9723E11543459C1AD337FE3583BFA99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral2
- Target
  vtfedit133/LGPL.txt
- Size 26KB
- SHA256 885a03f54b157961236f46843e79972abfcd6890b6cbb368bc7eca328ff95a12
- MD5 f14599a2f089f6ff8c97e2baa4e3d575
- SHA1 8f1a637d2e2ed1bdb9eb01a7dccb5c12cc0557e1
- SHA512 0f3545894cf1b8d5c8b3a940bd12deb98f18db4efce5a29bfc7018c2c3c9d2f6d2b06db48a42b8e74de2aecd28f21bab7f4a23fcf2b4c66791dce3c8eddef2af
- SSDEEP 384:cjWBIk+x/vIqk0TkX6sT6AATeINgKP+nHQ41fgcmmItyOQeM9YfWEeHBfuo0:ciBJsFkOTeDnLqFXTfleHBfuo0
- TLSH
  T11FC2953AB70603B216E202505A0FA4DEE31BD0793267596474D9C19D23ABC3553FBBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3
- Target
  vtfedit133/Readme.txt
- Size 9KB
- SHA256 14a2f730848adf3161034eab0bdcd38b9a6f52dd347450b4f1168cdd3dc4d96e
- MD5 a0087a58d0a49b6f53664525a91b6247
- SHA1 a6e525c0092747a59a74cdb7ef778480a32d1e21
- SHA512 7b099cc1ac1edb9d8cb6dcd480e9da65bd657e0f7c4e08b88a3b8dbc35568c1ea8030fa37fa5eed15acc05aaca6615804d9d224709b819230ae97f3c4853808f
- SSDEEP 192:URBxVrWZG2JCEZecY2TdSFXnOCLDKd2GgWr:2vGG2Jm+T4xr92
- TLSH
  T10212211BA097A37B29F34164A9556035EF3C412ADFAB5A623C5CE11C1310B58F2FF64E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral4
- Target
  vtfedit133/x64/DevIL.dll
- Size 2.2MB
- SHA256 fb0fbd00530725921524184e5e3bbfde03efb52a636ab971dc24ed30d90cdc95
- MD5 5016e8e352066f3fab3476a9421fea4b
- SHA1 8898679a803b98725b6e79d93989bcc44a0b0e60
- SHA512 9aa92bd255bfd85b99ddecc259156fbdc2b714c73ee1b9f4a6ab19b555c0e98afc889041eee088c64f55bfdd441244dd33a56527d9c6a29d2a7eed60bdcef763
- SSDEEP 49152:WShoNcXc34CsS46OmYtJX7NqeyGfpuT90Iv:tOyS33
- TLSH
  T104B518C3D7B040E1DCF690B995B75F03E3B2B804172093C723564A69AA1B7D416BFBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  vtfedit133/x64/HLLib.dll
- Size 304KB
- SHA256 45ac4ccb6e4e7f2960633e6d781b7a15baf89e7be21f0159d446f05a698f4583
- MD5 412d39f542fd9a4ff643a3fc2e39eab2
- SHA1 d03b0665b8e65392b4285fbf8855f9212be2c03c
- SHA512 41f5b1753944118d383d405d41d599c9e0bdb972a43a3a7c816a1f5b40657b9ae09f3ba9628c5604945a45147d03482d67860659721f92b86546f1d7742c2de4
- SSDEEP 6144:UfeTM0i9/PL3Q1Lgz1G3Lv6WPs6h0pc3fiZOhy74OVmG:Npip7IxvPPK23fiAuL
- TLSH
  T149645B5A76B54CB2DCA3C17C9D868662D7B6B4020762D7CB1760C35B0E277E92D3E3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  vtfedit133/x64/VTFEdit.exe
- Size 427KB
- SHA256 ad8932f23525e1fe543e20ca6c334bb2e8196feef485da84f0d41355bc97bbf6
- MD5 77114ea6b6f14204dcc14c73f6e34302
- SHA1 86c9e38096a8c8cd532ff732ef00b1af5ab1ca2c
- SHA512 014fa75e523efd40e69e530ff9a8ca8287805313cf6ab630ff646520c91495cb927ac09a2a4eb609be733dc6b01e4855ba04d424df8f3c2f5674f40ae546395f
- SSDEEP 6144:RWuRUfKObgvbNZVhx59+WQphjIWLJJSWIijQTu5QmDTpH4vrOI:+0zDU2kvu
- TLSH
  T1B594B63033E26553DCBE4BB00C35A1809737795A6E1CC28D194472ADADB2FA6DB137A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  vtfedit133/x64/VTFLib.dll
- Size 752KB
- SHA256 ac1b2b322c2da0e1d172f6390d8f0595e998fa4a0dd49962fa66e81232d6794e
- MD5 f73c7ec61620408f7bae46795742653c
- SHA1 1fd0107f8ea3d0aac7f171b6fef328e27a5e21d0
- SHA512 c359565375a0201229f24ccd217f01eae1ff15f751851ea0fe801a74dc2191c0245628f72704de1eabb621b20cb5ea50e6a709857c15fe3ef3a4fdf7919d9197
- SSDEEP 12288:pfdCNzS0ImoHiGiHBem9deBMjCRrouq/PwhxiJD5rhBQRP29c:nCNzS0ImoHhsAydeBlou8rhBYP29
- TLSH
  T14AF40941B4E2697DCFF681780D82A812F5227015172C6EE34B508E79397AFD0ADFF668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  vtfedit133/x86/DevIL.dll
- Size 746KB
- SHA256 9c9fbb292c9b1367576583d634754b72784b8d827483541385150132031260eb
- MD5 59e291838ae2c88f5f71108e4845a84b
- SHA1 3cea1ccd379691f34b58863e931ec85be55f4427
- SHA512 4203893968ceafe1e0e70c3f0dfe1dfd90a795033df69e84f25f68237deeec5ed37f7824c9d9e0cc0b121c72c16abd4059ccb71ad484d15ade427579f362369b
- SSDEEP 12288:T3RWz/CTxoOAjzHljSA6cg8rPbSHYIkhEmEazstA+UinhcoqzJPYoO8l:NRbEluQYYIkhwazrQzqlP
- TLSH
  T160F4D06CFC470D46FF0128786793DE44074C881E5202BA7BB12E9A6A75F131178A6FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral9
- Target
  out.upx
- Size 2.0MB
- SHA256 ded200847336a0441158af932c85aa336c1a31e349af6177b65a2f166ff75ebb
- MD5 e33fad19f6b1052bc632a76f72faf4f5
- SHA1 531cff37149043a1b023f4f3c9d5c353cf6645b8
- SHA512 4340e26e00b76a9264e9eebf7b66f0d39f6df2a985195bc821de4705f28fef3cf1119da76b9bf4c1d823a8f32096542935d7597d4fb853962910330fd9e68874
- SSDEEP 24576:QUEXpl4aVRk8Vjm0xKgt3fU7eA0V4ou8cABmj8+tPOb5pPUTSzcj+XhymmxsCIu2:uplo8VywTwSjallsCIuTg+
- TLSH
  T1379548C3DBF145F1DCE940F124BA6B179B769901273182D3A3662928F90B3D015B7BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  vtfedit133/x86/HLLib.dll
- Size 228KB
- SHA256 e3f809a84e0d8fa81ce80e98b848ac7291226202c7a9ad17edd9e89cd54bfbcb
- MD5 ac5ce840c89f28337dbbf0e7a704ec4a
- SHA1 b7203d068ad9ef7624167393482cfa320e16c8d8
- SHA512 2b71b6578b19df74e958bcca4454ac250c9bba42e59f20fba270ab3047630ad351f3d7e8fd44f24c59a3e2cfb542bebaee0a5103cb1494999d707ea03363b8e1
- SSDEEP 3072:Shnxx66VLWZ210JI6/dO+JkO343W4/J5ziLY/frE03t9ltgq+c5LhKDdD4X4:YxZWU10JIn+JXI3Wu9Ro2t9IqLo
- TLSH
  T11C347D2276B6C5B7DC8742381C9913321ABEF10767E3C6CBAB648E164E652D51E332D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  vtfedit133/x86/VTFEdit.exe
- Size 428KB
- SHA256 dc63970cbab65d720a5582ab242386bbbe5fbc7ab28b3336c0f0e54b8df6618a
- MD5 c6d892e005e8500ce5be8f897f14345e
- SHA1 8890dccbc543963138e9ed2638a7f0dae711b742
- SHA512 2c9326ed0cf6a4fe5c72cfbd6ae795f7c91d5af185187299a797ffb2796da2a8f7c77f5e45ef9603227b92762b1e659fc402b68887cf57e8aa0dc87a91fb203e
- SSDEEP 6144:1D8JaP0e0vX7sZkhtdelQphjIWLJJSWIiUAtcHsOMTF:+hyAtdIXA
- TLSH
  T1E794A43033E65657D8BE5BB00C34A284573A7D4B6E1CC28D5A40229DADB1FA68B137F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral12
- Target
  vtfedit133/x86/VTFLib.dll
- Size 572KB
- SHA256 84ed90cbc607d1bbdf08a3421afaa8e4726751d16048dd0a18eb15c171c0202f
- MD5 69f5a50b7dbebe71f42b402dbcc0ba62
- SHA1 ab62ddccc9c95e17124fbb1d9283dc8c94a1aba5
- SHA512 d86b6affa7612552ced434b5f2b7bcdd063b0efaed28916a8b4f250274363a00579c6f78d7d7ce2c2031216acc0563edc8b77dbc384d0be97f2a10db5e8c6e22
- SSDEEP 6144:gUy2lCMmYQRAR76ctBr8+uuRstHCWLyGXlPvyL4p8fXGxoQYOtAOcqYK:gU9mzRc7Tq+uuR2HnL7nyL4gGxoQ5te
- TLSH
  T14CC44B04AFBFCCB1D8F507B040961615EA640E652BA481D3FEE837CD8DB0BD599B25CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13