MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14 |
|---|---|
| SHA3-384 hash: | bd90bb8eea892a880515d4e881fac3faf729d06b946d80ce61310d111e1b9ea0ae97ff7c75236d55ca96a7ed873228bb |
| SHA1 hash: | 6812d14be2344c3d191c7220ba0c5bdf5117a436 |
| MD5 hash: | fcdf3489e52fd46318c6542acb539113 |
| humanhash: | cold-helium-victor-white |
| File name: | don12089.hta |
| Download: | download sample |
| File size: | 11'907 bytes |
| First seen: | 2026-07-28 18:28:33 UTC |
| Last seen: | Never |
| File type: | |
| MIME type: | text/html |
| ssdeep | 192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxz25JYb55qa5HdrI74bthOO:sXX+/DV7k/325WHqur84bTOO |
| TLSH | T1F93209CCFEE16270F31303CE37AB2826122461D72008C5C5FA4D9DE57F467D98627A5A |
| Magika | html |
| Reporter | |
| Tags: | hta |
Intelligence
File Origin
# of uploads :
1
# of downloads :
79
Origin country :
DEVendor Threat Intelligence
No detections
Result
Verdict:
Malicious
File Type:
HTA File - Malicious
Payload URLs
URL
File name
http://vektorex.com/cgii/don12089.hta',u='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',P='failedChecks',e=Object[a(a0M.c)](a0l)[a(0xd0)](([T,V])=
HTA File
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Verdict:
inconclusive
YARA:
4 match(es)
Tags:
Html SVG
Gathering data
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
3/10
Tags:
discovery
Behaviour
System Location Discovery: System Language Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
hta facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.