MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4dfc2f7bc34c1ad5caed7194ceadcf7abe9b73105b1f8f43afda69bb3095a82a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 4dfc2f7bc34c1ad5caed7194ceadcf7abe9b73105b1f8f43afda69bb3095a82a |
|---|---|
| SHA3-384 hash: | f8f5d0b98916b8fc49eabf94ec8151b5b4285928379377fe9ad9759d8444f95ef5ceaa80d01755c51435b5b293deb5aa |
| SHA1 hash: | ef258295c0622a9e4e41194c0addc11bc95d3dca |
| MD5 hash: | 98f62bde0ab264e4b0c95c7d20afea2e |
| humanhash: | orange-berlin-solar-magnesium |
| File name: | htarg2.hta |
| Download: | download sample |
| File size: | 27'488 bytes |
| First seen: | 2026-09-02 08:47:19 UTC |
| Last seen: | Never |
| File type: |  hta |
| MIME type: | text/html |
| ssdeep | 768:wZBsjBjrAyhtbgt4MiIO/5/9SLFUQzVPczVPVQZ:cMMmQzWzLm |
| TLSH | T1B4C2C66842F60422459320359EBF6F4972754A23554CFC08BD8C9980BF6EAB74EF7BE4 |
| Magika | html |
| Reporter |  abuse_ch |
| Tags: | hta |
Intelligence
File Origin
# of uploads :
1
# of downloads :
67
Origin country :
DEVendor Threat Intelligence
No detections
Detection(s):
Result
Verdict:
Malicious
File Type:
HTA File - Malicious
Payload URLs
URL
File name
https://l.cdn-fileserver.com/bping.php?vgd_oresf=one&prid=8PR11258V&cid=8CUHL418T&vgd_asn=6730&gdpr=1&wshp=0&vgd_tsce=L1340&vgd_cdv=O3435&vgd_wlstp=0&hvsid=00001788338605561014140899841072&lf=6&cc=CH&sc=ZH&mspa=0&vgd_cage=54&vgd_l2type=dmola&crid=126431565&vi=1788338605455409282&ugd=4&wsip=170763684&r=1788338605564&vgd_setup=c21&lper=100&requrl=https://ngyusa.com/catalog/htarg2.hta&ssld=
HTA File
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
3 / 100
Behaviour
Behavior Graph:
n/a
Score:
62%
Verdict:
Susipicious
File Type:
SCRIPT
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
Html
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
8/10
Tags:
discovery
Behaviour
System Location Discovery: System Language Discovery
Badlisted process makes network request
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
hta 4dfc2f7bc34c1ad5caed7194ceadcf7abe9b73105b1f8f43afda69bb3095a82a
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.