MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 1e1be24965f60a4849170b2f98de3d95467bd4116c64567399ceddf2f9bbad6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 1e1be24965f60a4849170b2f98de3d95467bd4116c64567399ceddf2f9bbad6f |
|---|---|
| SHA3-384 hash: | bfe230688e1c0794f9dc027764529c7677fd8b127769f08bb3868670e9e871c9ff186719eebf74cf50442e7ba3204411 |
| SHA1 hash: | 1bea59e2c25bf80301c1c9522a38e138bdaed808 |
| MD5 hash: | 2f689bbbbb74d26e071ca1ec04695b56 |
| humanhash: | magazine-mountain-stream-wisconsin |
| File name: | 빌어 먹을.hta |
| Download: | download sample |
| File size: | 4'716 bytes |
| First seen: | 2025-01-20 08:32:24 UTC |
| Last seen: | 2025-01-20 17:06:06 UTC |
| File type: |  hta |
| MIME type: | text/html |
| ssdeep | 96:1Zd9hwVPcoGa/j5yntxI8vq/5K/u04XfcQpy/:HdbwWoX/j5sxI8vE4/uPv34 |
| TLSH | T121A150676C19C52F1613C0E87736AB1CA896D947D202DCC0B6BC52C9FBC0ECB98636C8 |
| TrID | 80.6% (.HTM/HTML) HyperText Markup Language with DOCTYPE (12501/2/4) 19.3% (.HTML) HyperText Markup Language (3000/1/1) |
| Magika | html |
| Reporter |  lontze7 |
| Tags: | hta |
Intelligence
File Origin
# of uploads :
3
# of downloads :
85
Origin country :
FRVendor Threat Intelligence
Verdict:
Clean
Score:
89.3%
Tags:
n/a
Result
Verdict:
Clean
File Type:
HTA File
Result
Threat name:
n/a
Detection:
suspicious
Classification:
spyw
Score:
21 / 100
Signature
Opens network shares
Behaviour
Behavior Graph:
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
8/10
Tags:
discovery
Behaviour
Modifies Internet Explorer settings
System Location Discovery: System Language Discovery
Blocklisted process makes network request
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
hta 1e1be24965f60a4849170b2f98de3d95467bd4116c64567399ceddf2f9bbad6f
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.