{
	"id": "f6f16ed6-9f5a-4290-bfea-2bfb2ce11b9d",
	"created_at": "2026-04-06T00:06:32.708557Z",
	"updated_at": "2026-04-10T13:12:40.77705Z",
	"deleted_at": null,
	"sha1_hash": "99a624a121ccd22fa2db61d060638c951eea1e0a",
	"title": "I'm Sorry For Hidden Tear and EDA2",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 105087,
	"plain_text": "I'm Sorry For Hidden Tear and EDA2\r\nBy Utku Sen - Blog\r\nArchived: 2026-04-05 13:13:03 UTC\r\n21 August 2017\r\nAs you all know, I published Hidden Tear's code in August 2015, and EDA2's code in October 2015. I explained\r\nthe reasons behind these publications several times. To summarise them again:\r\n1. Changing programming language trend to a high level language, so that decompile process will be\r\npossible\u0026faster.\r\n2.  Destroying the business of ransomware code\u0026service sellers.\r\n3. Using implemented backdoors to decrypt infected files.\r\n4. Providing a ransomware source code for educational purposes\r\nI don't want to talk about them over and over again. Let's just check the outcomes:\r\n1. Yes, trend is slightly changed to a high level language (C#) but it doesn't matter since you can't find a\r\nsolution for decryption anymore.\r\n2. Their business was slightly broken in 2016, but now it's growing again.\r\n3. Yes we were able to decrypt some cases but the backdoors are fixed by time.\r\n4. That's the only good outcome\r\nNow, we are seeing new Hidden Tear/EDA2 variants appears every day which doesn't have any backdoor. I've\r\nalready seen this long time ago, and I moved to different things. I want to say that I'm sorry for Hidden\r\nTear/EDA2 experiments, they were total failures. Caused more chaos even my intentation was good.\r\nhttps://utkusen.com/blog/im-sorry-for-hidden-tear-eda2\r\nPage 1 of 2\n\nNote: Some may think that I'm scared after Marcus's case, that's not the thing. I've published Hidden Tear in\r\nAugust 2015, went to Las Vegas in 2016 and 2017. I have no legal problem since I didn't sell this code or used it\r\nin criminal activities.\r\nNote 2: I'm seeing some people programmed a variant named EDA3, there is no EDA1 or EDA3 from my side. 2\r\nis not a version number.\r\nSource: https://utkusen.com/blog/im-sorry-for-hidden-tear-eda2\r\nhttps://utkusen.com/blog/im-sorry-for-hidden-tear-eda2\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://utkusen.com/blog/im-sorry-for-hidden-tear-eda2"
	],
	"report_names": [
		"im-sorry-for-hidden-tear-eda2"
	],
	"threat_actors": [],
	"ts_created_at": 1775433992,
	"ts_updated_at": 1775826760,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/99a624a121ccd22fa2db61d060638c951eea1e0a.pdf",
		"text": "https://archive.orkl.eu/99a624a121ccd22fa2db61d060638c951eea1e0a.txt",
		"img": "https://archive.orkl.eu/99a624a121ccd22fa2db61d060638c951eea1e0a.jpg"
	}
}