MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7
SHA3-384 hash:	9a0befbe823b3816a6e7251cc3ae0ed1b8618b5596dd88076579d8e94d3f124a906fa0e3bf05b28bc5dff836e9618600
SHA1 hash:	e776732ec230b1383f9b7ff95bb8344248ff866b
MD5 hash:	0a79b7d7fd87603437f6be832ddb8c5b
humanhash:	alabama-oscar-north-mountain
File name:	e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7.html
Download:	download sample
File size:	57'998 bytes
First seen:	2026-03-17 10:58:38 UTC
Last seen:	Never
File type:	html
MIME type:	text/html
ssdeep	1536:N360pMSWkkgt+SpYpA3EHY7Y3YWhYsY69nm5LjTL2VvwqvTMLU6ITvuGJkh78JKh:NnKpA3E4UIWSpASeYNtnb
TLSH	T129434925608614182113D1D6F693935E3175810BEB0B4D2CB6AE80B2AFDD9F6D77B2FC
Magika	html
Reporter	JAMESWT_WT
Tags:	185-246-223-71 94-156-170-255 ClickFix FakeCaptcha html

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Script.SNH-gen.76159434.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b9340293b644ca466ade44

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

aidetect clickfix fakeapp phishing

Link:

https://www.filescan.io/uploads/69b93400493cb7d62d01d576/reports/7168b35c-4f50-4049-9006-dd34aa8ffa64/overview

Hybrid Analysis HEUR_Trojan_Script_Generic

Verdict:

Malicious

Labled as:

HEUR_Trojan_Script_Generic

Link:

https://www.hybrid-analysis.com/sample/e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

html

Link:

https://opentip.kaspersky.com/e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7/results?tab=lookup

Nucleon Malprob Benign

Score:

28%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

4 match(es)

Tags:

Html SVG

Link:

https://app.malva.re/file/0a79b7d7fd87603437f6be832ddb8c5b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7/

ReversingLabs TitaniumCloud Document-HTML.Malware.FakeCaptcha

Threat name:

Document-HTML.Malware.FakeCaptcha

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-05 01:49:46 UTC

File Type:

Text (HTML)

Extracted files:

8

AV detection:

1 of 36 (2.78%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4y5kfk5f2fpp4f35jryuw2vooccsdmk6ordhlewuystmj55emllq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.06

Link:

https://yomi.yoroi.company/submissions/e63aa2aba5d15efe177d4c714b6aae708521b15e74467592d4c4a6c4f7a462d7