MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee
SHA3-384 hash:	074dc2d285eb14c1b0ba641189b886271c98c49af24179b4c2acc336d328ea3f4310c324127d10cb1e1cf45bfa4e4d66
SHA1 hash:	f8f27809c2857284a01db27c5b5d2ee631f8a62f
MD5 hash:	585a310026f5c869e41ac74e772e831e
humanhash:	romeo-yellow-zebra-fish
File name:	goodthingsforbestpersonforme.hta
Download:	download sample
File size:	446 bytes
First seen:	2026-08-31 16:12:48 UTC
Last seen:	2026-09-01 04:24:37 UTC
File type:	hta
MIME type:	text/html
ssdeep	6:qTIuJzhqIwGiY63fAbplilAl3t11/+SR0AqIbR2AWHwle70V4LKTjawlQYdF0NAg:qTp0JYyg9193R5qsPWGVcYdqAEd2QL
TLSH	T126F05C4294A04D19523016142EC0FA495AD6EA479349AE4872AA60B94FC47C2CECF97C
Magika	html
Reporter	abuse_ch
Tags:	hta

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

65

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

DocGuard Clean

Result

Verdict:

Clean

File Type:

HTA File

Link:

https://app.docguard.net/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee/results/dashboard

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6a95a8192fe8a395068f5373/reports/d19fd686-d745-40b7-88da-bd0287623a57/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

html

Link:

https://opentip.kaspersky.com/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee/results?tab=lookup

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1966296

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

Html

Link:

https://app.malva.re/file/585a310026f5c869e41ac74e772e831e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fvbo3enkg5tfihu64733rl464tzgfixqlzxxk6fjiei2d5b3h7xa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/260831-tn7bqacp8v/

Behaviour

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2d42ed91aa3766541e9ee7f7b8af9ee4f262a2f05e6f7578a94111a1f43b3fee