🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2ac5c8d6d3b163a78a231537e86cd4e8f2e85aa6fac6fbc077f544fc4f62b3db. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2ac5c8d6d3b163a78a231537e86cd4e8f2e85aa6fac6fbc077f544fc4f62b3db
SHA3-384 hash: 6a5fd2c9bd3e9768015d068ef09835bc491ab55b5a4fd8382682389a6fbdc094e91ba142fb3bd6f6351d0f8845afaeba
SHA1 hash: ea3a7ea8abbbf181dc31d6556aad8087d2437f32
MD5 hash: 7c8bb921981915a4b7513499c7fdf015
humanhash: grey-diet-triple-magazine
File name:x.bat
Download: download sample
File size:318 bytes
First seen:2026-11-14 06:50:41 UTC
Last seen:Never
File type:Batch (bat) bat
MIME type:text/x-msdos-batch
ssdeep 6:hn0mxBCFaH1tRFoezbAukH1i7KFCYwfezbAuRtFzH1ieqezbqNjbxn:MFaVeaAukVaeyyAu7xVka2j1
TLSH T1B0E0BFD07BBE8946D2346C50199F1B292B44A2AB3625BA22C6D62530FC25553671C2D4
Magika batch
Reporter Latin

Intelligence

File Origin
# of uploads :
1
# of downloads :
12
Origin country :
US US
Vendor Threat Intelligence
No detections
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/99940/
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6af804e983200b505eda863c
Tags:
n/a
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/2ac5c8d6d3b163a78a231537e86cd4e8f2e85aa6fac6fbc077f544fc4f62b3db
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
21 / 100
Link:
https://www.joesandbox.com/analysis/2005832
Signature
Uses schtasks.exe or at.exe to add and modify task schedules
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 process2 2 Behavior Graph ID: 2005832 Sample: x.bat Startdate: 14/11/2026 Architecture: WINDOWS Score: 21 5 cmd.exe 2 2->5         started        signatures3 14 Uses schtasks.exe or at.exe to add and modify task schedules 5->14 8 conhost.exe 5->8         started        10 schtasks.exe 1 5->10         started        12 schtasks.exe 1 5->12         started        process4
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/2ac5c8d6d3b163a78a231537e86cd4e8f2e85aa6fac6fbc077f544fc4f62b3db
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2ac5c8d6d3b163a78a231537e86cd4e8f2e85aa6fac6fbc077f544fc4f62b3db/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=flc4rvwtwfr2pcrdcu36q3gu5dzoqwvg7ldpxqdx6vcpyt3cwpnq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution persistence
Link:
https://tria.ge/reports/261114-hmk7badz21/
Behaviour
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Executes a command shell one-liner
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/99940/

Comments