Local reference
Suspicious dependency
Inferred
Mal-ecule
O(Er₂)
Objectives
suspicious severity, 80% confident.
evasion/masquerade/file
start "" "<var>" shell-open default handler call
notable severity, 95% confident.
evasion/self-delete/file
Ping delay pattern used by self-delete routines
component severity, 100% confident.
command-and-control/dropper
echo off batch command
component severity, 95% confident.
command-and-control/dropper/execution
Regex component marker
component severity, 100% confident.
impact/ransom
Start launcher per host
Micro-behaviors
baseline severity, 80% confident.
communications/ip
Hardcoded loopback IPv4 address
baseline severity, 80% confident.
fs/path
Hardcoded Windows root path (C:\, D:\, etc.)
Metadata
component severity, 90% confident.
file/text
File has 30 or more lines
Identity
| SHA-256 | 943a0078beea7c43f8fa7db17829733bb64ebe4212a7a8b7a5a4c64d07a7921f |
|---|---|
| Filename | startEWinDbg.bat |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 17 May 2026 07:33 UTC |
|---|---|
| First analyzed | 18 May 2026 00:06 UTC |
| Last analyzed | 18 May 2026 00:06 UTC |
| Last updated | 18 May 2026 00:06 UTC |
Labeling
| Label | good |
|---|---|
| Label source | harvest |
| Traits version | 60127 |
Not seeing what you expected? Let us know