Open-source atomic malware analysis

Analyze another

1b3c82f59f90bd345f290cee52f0b80858545abd6fdb8c319ebbe0066a6a39ff.bat

BATCH
Verdict: BENIGN
SHA256: 1b3c82f59f90bd345f290cee52f0b80858545abd6fdb8c319ebbe0066a6a39ff · 27%
Mal-ecule
O(As₂)H(Po)Md
Size 828.7 KB download
First seen 94 days ago
Analyzed 66 days ago

Objectives

suspicious severity, 97% confident.
anti-static/obfuscation/string Batch fragmentation and junk-padding profile
baseline severity, 85% confident.
anti-static/obfuscation/code-metrics Multiple long lines (>1000 chars)
component severity, 95% confident.
command-and-control/dropper/execution Regex component marker
component severity, 90% confident.
command-and-control/dropper/staging PowerShell archive download tool marker
component severity, 85% confident.
evasion/hosts-file mwti (MicroWorld eScan parent)
component severity, 100% confident.
impact/ransom Start launcher per host

Micro-behaviors

suspicious severity, 82% confident.
process/create Windows start minimized flag
component severity, 92% confident.
data/text/security Security advisory source identifiers

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: base64
baseline severity, 100% confident.
file Batch script extension
component severity, 90% confident.
file/text Very long line

Identity

SHA-256 1b3c82f59f90bd345f290cee52f0b80858545abd6fdb8c319ebbe0066a6a39ff
Filename 1b3c82f59f90bd345f290cee52f0b80858545abd6fdb8c319ebbe0066a6a39ff.bat

Origin

Source harvest

Timeline

First seen 15 May 2026 12:14 UTC
First analyzed 12 Jun 2026 04:32 UTC
Last analyzed 12 Jun 2026 04:32 UTC
Last updated 12 Jun 2026 04:32 UTC

Labeling

Label bad
Label source harvest
Traits version e31a3