MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2
SHA3-384 hash: e738a0f6b31c9bf3f093c776103e04d9ac41b7d8fc656ee843660e491d51e17ec22d89c35ead5343664d83edda8e7f6f
SHA1 hash: 3ff674fd5187bc6f1ecb59917a430233fb0d6d5a
MD5 hash: 513f15c90efa250952339cf5635408ae
humanhash: edward-carbon-utah-hydrogen
File name:vp32ssdaq.html
Download: download sample
File size:20'358 bytes
First seen:2026-03-17 10:23:55 UTC
Last seen:2026-03-17 10:36:41 UTC
File type: html
MIME type:text/html
ssdeep 384:8zLkP3SXZVG4YG+YIp3mJDwhvsR5HsnF/jUk4iIiwiyiiiMk4i+Yivdin/ijiftA:83A3SXZYzu+sRRsnhjUkVlNbLMkV+1vv
TLSH T1AD92851AA91100169637C3B8DF63974EF73241178342866A3FEC52525FB6C94AAB3FDC
Magika html
Reporter JAMESWT_WT
Tags:booking ClickFix FakeCaptcha html

Intelligence

File Origin
# of uploads :
2
# of downloads :
80
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Score:
81.4%
Link:
https://cyber-fortress.com/docs/result/index.php?id=69b92bd193b644ca466adc8d
Tags:
virus sage html
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
aidetect phishing phishing
Link:
https://www.filescan.io/uploads/69b92bcf2000fc76c3e53dce/reports/44170238-7e10-4c94-9064-d951ddb993ef/overview
Verdict:
Malicious
Labled as:
HTML/FakeCaptcha.BV trojan
Link:
https://www.hybrid-analysis.com/sample/6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2
Verdict:
Malicious
File Type:
html
Link:
https://opentip.kaspersky.com/6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2/results?tab=lookup
Score:
2%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2
Verdict:
inconclusive
YARA:
4 match(es)
Tags:
Html SVG
Link:
https://app.malva.re/file/513f15c90efa250952339cf5635408ae
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2/
Threat name:
Document-HTML.Trojan.FakeCaptcha
Create hunting rule
Status:
Malicious
First seen:
2026-03-17 10:20:43 UTC
File Type:
Text (HTML)
Extracted files:
4
AV detection:
2 of 36 (5.56%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nx6q3qtwdkpjoxl664dodq5uln5qzscqtikurqkkf426ady7alba._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.16
Link:
https://yomi.yoroi.company/submissions/6dfd0dc2761a9e975d7ef706e1c3b45b7b0cc8509a1548c14a2f35e00f1f02c2

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments