MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a
SHA3-384 hash:	8c7a9bc7392d376cffa11db181843cb3e5477fcc41590e1b00c300b64389107a00c76ba6b1e9fc01443617220132f06d
SHA1 hash:	c90688b0139f8a57b048e4799b7edc4cb09870f1
MD5 hash:	858f5f1e4a61a614e49cc7c422d7b7f0
humanhash:	one-single-south-zulu
File name:	output.hta
Download:	download sample
File size:	9'973 bytes
First seen:	2025-04-27 14:58:18 UTC
Last seen:	2025-04-28 00:26:15 UTC
File type:	hta
MIME type:	text/html
ssdeep	192:IRnQ3wfdxD5ubdHKhWicNbktrrNXNSRq2JkPOJkxgmlbdIxbq:aQ3wVxDQK0N4XNSRq2GPOJkxgmhdIxbq
TLSH	T13322E9635610703F71674DCB30C7364C7066904BE8A74C56EA756B98CEE099BAA2EF4C
Magika	txt
Reporter	abuse_ch
Tags:	hta

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680e4a8ec8b2e86d0ac337b3

Tags:

spawn small

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

HTA File - Malicious

Link:

https://app.docguard.net/6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a/results/dashboard

Payload URLs

URL

File name

https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css

HTA File

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

obfuscated

Link:

https://www.filescan.io/uploads/680e4610218c4a98ade3e967/reports/0e762f2f-7334-4957-a69e-23bfd024418a/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

3 / 100

Link:

https://www.joesandbox.com/analysis/1675490

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nvaby4e52ksa4qpreqlec2hzstojtfvgqas33iw7f4rezsvrscfa._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

discovery

Link:

https://tria.ge/reports/250427-scbv1aswct/

Behaviour

Program crash

System Location Discovery: System Language Discovery

Blocklisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6d401c709dd2a40e41f124164168f994dc9996a68025bda2df2f224ccab1908a