MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f32c077edf6ffdc8c25641cd43287c9136ef90b7f5a9dd54edf6e3efe4c48461. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: f32c077edf6ffdc8c25641cd43287c9136ef90b7f5a9dd54edf6e3efe4c48461
SHA3-384 hash: c4ad5853dfcac6d8ba20fc24baa18c68ee6dfedf13439c9774ed35e7a11c76878e3f2ad4a0d5fbd66274afd43adf797d
SHA1 hash: bd1a21e46ad972b7ed627c9e0cb31429ff6d52b5
MD5 hash: c370f21f46389e056c8cb0e184422c50
humanhash: cat-north-comet-spring
File name:vbConst.hta
Download: download sample
File size:3'107 bytes
First seen:2021-04-01 20:41:40 UTC
Last seen:Never
File type:HTML Application (hta) hta
MIME type:text/html
ssdeep 48:ihokNNNKzg7nOmg5QxwYHceQG1kCmLgAnpVX2eX2llk06YesFL9tJhzG+Pz:EokTgcrIixDxQgDgLWk06YhtfzG+Pz
TLSH 8A51A5502F56661C07EF4C9068ABF8162C601B320789D876CE41D69D5CA1A8EEE3BDDB
Reporter p5yb34m
Tags:base64 Encoded hta


Avatar
p5yb34m
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Public\vbConst.hta"

Intelligence


File Origin
# of uploads :
1
# of downloads :
228
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Threat name:
Script.Trojan.Heuristic
Status:
Malicious
First seen:
2021-04-01 20:42:08 UTC
AV detection:
4 of 43 (9.30%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

HTML Application (hta) hta f32c077edf6ffdc8c25641cd43287c9136ef90b7f5a9dd54edf6e3efe4c48461

(this sample)

  
Delivery method
Distributed via web download

Comments