MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14
SHA3-384 hash: bd90bb8eea892a880515d4e881fac3faf729d06b946d80ce61310d111e1b9ea0ae97ff7c75236d55ca96a7ed873228bb
SHA1 hash: 6812d14be2344c3d191c7220ba0c5bdf5117a436
MD5 hash: fcdf3489e52fd46318c6542acb539113
humanhash: cold-helium-victor-white
File name:don12089.hta
Download: download sample
File size:11'907 bytes
First seen:2026-07-28 18:28:33 UTC
Last seen:Never
File type:HTML Application (hta) hta
MIME type:text/html
ssdeep 192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxz25JYb55qa5HdrI74bthOO:sXX+/DV7k/325WHqur84bTOO
TLSH T1F93209CCFEE16270F31303CE37AB2826122461D72008C5C5FA4D9DE57F467D98627A5A
Magika html
Reporter abuse_ch
Tags:hta

Intelligence


File Origin
# of uploads :
1
# of downloads :
79
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Malicious
File Type:
HTA File - Malicious
Payload URLs
URL
File name
http://vektorex.com/cgii/don12089.hta',u='/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f',P='failedChecks',e=Object[a(a0M.c)](a0l)[a(0xd0)](([T,V])=
HTA File
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Verdict:
inconclusive
YARA:
4 match(es)
Tags:
Html SVG
Gathering data
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Behaviour
System Location Discovery: System Language Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

HTML Application (hta) hta facb03a4bb57c0935aa23e44d0400648abb3299d8799421d3f6ea90d8be07e14

(this sample)

  
Delivery method
Distributed via web download

Comments