Local reference
Suspicious dependency
Inferred
Mal-ecule
O(As)H₂(F₂Po)
Objectives
suspicious severity, 97% confident.
anti-static/obfuscation/string
Batch fragmentation and junk-padding profile
baseline severity, 70% confident.
anti-static/obfuscation/code-metrics
Very low whitespace ratio (minified/compressed)
component severity, 85% confident.
collection/stealer
Explicit Desktop path token in content
component severity, 100% confident.
command-and-control/dropper
echo off batch command
component severity, 95% confident.
command-and-control/dropper/execution
Regex component marker
component severity, 90% confident.
command-and-control/dropper/staging
Batch has long encoded token
component severity, 100% confident.
exfiltration/cloud
Regex component marker
component severity, 100% confident.
impact/ransom
Start launcher per host
Micro-behaviors
suspicious severity, 95% confident.
fs/file
Batch script self-deletion command
notable severity, 75% confident.
fs/write/file
Batch appends output to file path
notable severity, 85% confident.
process/create/shell
Execute commands via cmd.exe /c
component severity, 80% confident.
process/info
Batch self path reference
Metadata
component severity, 90% confident.
file/text
Very long line
Identity
| SHA-256 | 91bbeb187c359460b0a94dab5b3f957ddeaeff4cf6ec0ef4e070624b406a34d6 |
|---|---|
| Filename | 91bbeb187c359460b0a94dab5b3f957ddeaeff4cf6ec0ef4e070624b406a34d6.bat |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 13 May 2026 07:52 UTC |
|---|---|
| First analyzed | 31 May 2026 08:41 UTC |
| Last analyzed | 31 May 2026 08:41 UTC |
| Last updated | 31 May 2026 08:41 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 52045 |
Not seeing what you expected? Let us know