MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038
SHA3-384 hash:	fe1eae78f1afb90f71da0c91fd457b0be33cf41ce7f427d267fb6b0639cf18ce4114e9fd60b2d1b41604288f6f0967ff
SHA1 hash:	a2ec0004db705ab548c83da7b40254e2edf1e7c1
MD5 hash:	62f9ac820d8a359167ab5d897a47c597
humanhash:	johnny-florida-alaska-river
File name:	gg2.hta
Download:	download sample
File size:	714 bytes
First seen:	2025-10-12 11:36:36 UTC
Last seen:	Never
File type:	hta
MIME type:	text/html
ssdeep	12:qTpYLsEzAvb+qJmrx2WCvs+gHVWxsEZvumCMDt99skjkoZvkheIAqJmrODRRy2Xd:0pYIWAvVc2tvsZpZmVxhIPtRRYM1yh4j
TLSH	T1C501C0A31C81B816C43982E0DE65E65C95CE916053818CA0CEEEFCB23184792CD727CD
Magika	html
Reporter	abuse_ch
Tags:	hta

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

43

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

no reply from clamd

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68eb92fbf2ca2f143e41afd1

Tags:

n/a

DocGuard Clean

Result

Verdict:

Clean

File Type:

HTA File

Link:

https://app.docguard.net/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038/results/dashboard

Payload URLs

URL

File name

https://connect.bitdefender.net

HTA File

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

html

First seen:

2022-10-18T22:51:00Z UTC

Last seen:

2025-10-12T08:51:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038/results?tab=lookup

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

3 / 100

Link:

https://www.joesandbox.com/analysis/1793569

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-10-12 11:37:19 UTC

File Type:

Text (HTML)

Extracted files:

2

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yphpbvsmd5rhco7fwj6vq2xxt2n3mxmlu6arpskry5mniinkca4a._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

discovery

Link:

https://tria.ge/reports/251012-nqx8yatmw6/

Behaviour

System Location Discovery: System Language Discovery

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/c3cef0d64c1f62713be5b27d586af79e9bb65d8ba78117c951c758d421aa1038