Resubmissions

02/11/2026, 01:41

261102-b33mzazte15

02/11/2026, 01:29

261102-bwcg7sztcx5

General

  • Target
    vim-malware-verdacht.zip
  • Size 2.3MB
  • Sample261102-b33mzazte1
  • SHA256 e925e8dfdbf5bcb2147cecb4d62c9faa800c21826f8a5f762560e4d2d44fe236
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • vim-malware-verdacht.zip
    .zip 2.3MB
  • 8078c4d5f13e/gvim.exe
    .exe 213KB
  • 8078c4d5f13e/hau
    46KB
  • 8078c4d5f13e/python3.dll
    .dll 72KB
  • 8078c4d5f13e/python314.dll
    .dll 2.4MB
  • 8078c4d5f13e/pythonw.exe
    .exe 102KB
  • 8078c4d5f13e/vcruntime140_1.dll
    .dll 48KB
  • 8078c4d5f13e/vim64.dll
    .dll 2.1MB

vim-malware-verdacht.zip

  • SHA256 e925e8dfdbf5bcb2147cecb4d62c9faa800c21826f8a5f762560e4d2d44fe236
  • MD5 SHA1 SHA512 SSDEEP TLSH