MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef
SHA3-384 hash:	3cc86cf8bfab386933af7029342c0d2ca4b0bef1810191af3bf0b224fe406f794501e4ff288aaf569654d9245798a84b
SHA1 hash:	ebf9b8fb7c6476bde01e5dba7482188564444c7d
MD5 hash:	ee4a296989c52c0dd5cfbc175bc392d1
humanhash:	ink-white-kentucky-asparagus
File name:	creatingthingswithgoodnews.hta
Download:	download sample
Signature	RemcosRAT Alert Create hunting rule
File size:	195 bytes
First seen:	2025-08-25 12:19:20 UTC
Last seen:	Never
File type:	hta
MIME type:	text/html
ssdeep	3:qGXgM1KSoO3QJuC9vmKjOkADFoSRO9Q4J7D8jO3QX8EXVlc7983LKmp+K+5n:qA7JiJNHmmV7D2XhVlYe3+K+Kon
TLSH	T191D012DE09408B4A57F30117EB23B168747320FE0D09E68122901110342879FDE6FDCE
Magika	html
Reporter	abuse_ch
Tags:	hta RemcosRAT

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

56

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68ac54d6eb163e0ec182ac30

Tags:

n/a

DocGuard Clean

Result

Verdict:

Clean

File Type:

HTA File

Link:

https://app.docguard.net/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef/results/dashboard

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

html

First seen:

2022-05-30T12:29:00Z UTC

Last seen:

2022-05-30T12:29:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef/results?tab=lookup

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1764529

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

1 match(es)

Tags:

Html

Link:

https://app.malva.re/file/ee4a296989c52c0dd5cfbc175bc392d1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yydwb5v3kocv6wccivpojn6soq3eodytnydtgr4t4pzvglrbhpxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250825-phfvcsgj9w/

Behaviour

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/c60760f6bb53855f5842455ee4b7d27436470f136e07334793e3f3532e213bef