docs1549.hta

Classification: Malicious

docs1549.hta is a malicious file sample. Linked to Bazar malware. Reported by 1 threat source, last seen 2022-02-01. Detected by 25 antivirus engines.

Detection summary

  • 25 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader MalwareBazaar Abuse.ch 2022-02-01 12:50:51 2022-02-01 12:50:51 malicious-activity S0534 Bazar
Generic.Malware MalwareBazaar Abuse.ch 2022-02-01 12:50:51 2022-02-01 12:50:51 malicious-activity

Sample information

Filenames
docs1549.hta
File type
text/html
MD5
7fa4c0180b078358eca422374d8775cb
SHA-1
496672e49d4ead73733cde3f86a8808226ad7192
SHA-256
8278fcd2ae91d2b42fc4996af97bba9dd4043a6c394280004a43c5f258e2b3b8
First indexed
2022-02-01 14:15:10
Last updated
2026-06-28 02:25:31

Antivirus detections

EngineDetection
SymantecISB.Downloader!gen80
AvastScript:SNH-gen [Trj]
RisingDownloader.Agent!8.B23 (TOPIS:E0:JexQphvimtH)
FortinetVBS/Kryptik.QR!tr
AVGScript:SNH-gen [Trj]
ALYacTrojan.GenericKD.48216914
Ad-AwareTrojan.GenericKD.48216914
BitDefenderTrojan.GenericKD.48216914
ComodoMalware@#29mdvz127ax6q
CyrenVBS/Agent.AJK!Eldorado
ESET-NOD32PowerShell/TrojanDownloader.Agent.DV
EmsisoftTrojan.GenericKD.48216914 (B)
FireEyeTrojan.GenericKD.48216914
GDataTrojan.GenericKD.48216914
IkarusTrojan-Downloader.PowerShell.Agent
KasperskyHEUR:Trojan-Downloader.VBS.Agent.gen
LionicTrojan.VBS.SLoad.a!c
MAXmalware (ai score=82)
McAfeeVBS/Downloader.aaz
McAfee-GW-EditionBehavesLike.HTML.Dropper.xr
MicroWorld-eScanTrojan.GenericKD.48216914
MicrosoftTrojan:JS/Tnega.SST!MTB
TrendMicroTROJ_FRS.VSNTB222
TrendMicro-HouseCallTROJ_FRS.VSNTB222
ViRobotJS.Z.Agent.4179