hta Malware analysis
Tags
attack-pattern: Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Powershell - T1059.001 Connection Proxy - T1090 Mshta - T1170 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 814028dc-6c33-45a5-9397-48b9f6af04b1
Fingerprint ac2013f0e1a4079e
Analysis status DONE
Considered CTI value 0
Text language
Published March 10, 2023, 7:20 p.m.
Added to db March 10, 2023, 8:52 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline hta Malware analysis
Title hta Malware analysis
Detected Hints/Tags/Attributes 24/1/9
Source URLs
Redirection Url
Details Source https://infosecwriteups.com/hta-malware-analysis-96bd9263208?gi=bf525a871b6d&source=rss----7b722bfd1b8d---4
Details Source https://infosecwriteups.com/hta-malware-analysis-96bd9263208?gi=c60952eb40ff&source=rss----7b722bfd1b8d---4
Details Redirection https://infosecwriteups.com/hta-malware-analysis-96bd9263208?gi=f1c4ee00dbf3&source=rss----7b722bfd1b8d---4
Details Redirection https://infosecwriteups.com/hta-malware-analysis-96bd9263208?source=rss----7b722bfd1b8d---4
Details Redirection https://medium.com/m/global-identity-2?redirectUrl=https%3A%2F%2Finfosecwriteups.com%2Fhta-malware-analysis-96bd9263208%3Fsource%3Drss----7b722bfd1b8d---4
URL Provider
Details Provider Source level domain
Details infosecwriteups.com infosecwriteups.com
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 136 ✔ InfoSec Write-ups - Medium https://infosecwriteups.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 372 
wscript.shell
Details Domain 339 
system.net
Details Domain 1 
ahtaeereddit.org
Details Domain 61 
system.windows
Details File 1 
temp+'s4a2924808f66985de3a9ad1e3d743e0d.exe
Details File 1 
524.dat
Details File 456 
mshta.exe
Details File 1 
s4a2924808f66985de3a9ad1e3d743e0d.exe
Details Url 1 
https://ahtaeereddit.org/17/524.dat