MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d
SHA3-384 hash:	de1a31eab143b59421a4ae47adb44b69ee83eb84d5db68e21411a2aefd6847cc91e3d809ef83c2162d9e2842896e8419
SHA1 hash:	cf79760bda7c4d1f1c4c5f5a7e404d0dfb5870eb
MD5 hash:	83e1b48aa0eb71d2291df4ba75e1c8bf
humanhash:	aspen-beer-burger-oregon
File name:	document.hta
Download:	download sample
File size:	7'372 bytes
First seen:	2025-12-26 19:38:38 UTC
Last seen:	Never
File type:	hta
MIME type:	text/html
ssdeep	192:OZ3IE/CTK/ewuq0llHYoHsfOBro2Tc/O9Smy:OP/WYoHsfO2/L
TLSH	T148E1D796BCF324087417906DCFBEA2587069905B474ACD9CFDCC62A8DF0C2A49622FDC
TrID	80.6% (.HTM/HTML) HyperText Markup Language with DOCTYPE (12501/2/4) 19.3% (.HTML) HyperText Markup Language (3000/1/1)
Magika	html
Reporter	abuse_ch
Tags:	hta

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=694ee59f038f10550b561a4f

Tags:

small

Hybrid Analysis HTML/ScrInject.B trojan

Verdict:

Malicious

Labled as:

HTML/ScrInject.B trojan

Link:

https://www.hybrid-analysis.com/sample/3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d

InQuest

Result

Gathering data

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

spyw

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1839948

Signature

Opens network shares

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

4%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

Html

Link:

https://app.malva.re/file/83e1b48aa0eb71d2291df4ba75e1c8bf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hkb3auxi24nxgyyopjxznzm5qwjrumjme2je645s23hq4kafgioq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

discovery

Link:

https://tria.ge/reports/251226-yc3avawpfr/

Behaviour

System Location Discovery: System Language Discovery

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.