MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6
SHA3-384 hash:	27ea62a227ef5b883e47b382fb7589fc84bfbe1176bb51c9ca70a6d2f9d22b79639c77800285019ae075db1f6feb9b69
SHA1 hash:	73bfd6a7bb77a549b9e050ec36cd906dceb218a7
MD5 hash:	a65482d7932f6977bf302ecfe0cb955e
humanhash:	kitten-comet-speaker-delaware
File name:	cmd.bat
Download:	download sample
File size:	101 bytes
First seen:	2026-03-16 19:11:46 UTC
Last seen:	2026-03-16 19:13:08 UTC
File type:	bat
MIME type:	text/plain
ssdeep	3:pFIqW0FW8WmUOHBEE3weDDdf5QpbBZGt0FTn:pFhkmUOHyQNfUfZG2Tn
TLSH	T1EEB01274568FA9104217CFF640F2C491BA4F8242D0E2E9BB90B030C81838038280F18D
Magika	batch
Reporter	JAMESWT_WT
Tags:	185-246-223-71 bat

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

63

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Suspicious

Malware family:

n/a

ID:

1

File name:

cmd.bat

Verdict:

Suspicious activity

Analysis date:

2026-03-16 19:07:40 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/b634270a-4cce-45cd-992c-426ff4359c46

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/57665/

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b8561193b644ca466ab157

Tags:

shell sage

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

Behaviour

Running batch commands

Launching the process to interact with network services

Connection attempt

DNS request

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

net

Link:

https://www.filescan.io/uploads/69b856092000fc76c3e34509/reports/4a845eaa-01e6-4a57-ac8d-1b5149c90b28/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6/results?tab=lookup

Nucleon Malprob Susipicious

Score:

68%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6/

Neiki Susipicious

Verdict:

Susipicious

Link:

https://tip.neiki.dev/file/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mc4sfjujwuxt2uhrvurrtddv4tuuoz5llvfnq7hs7sjhii65yhta._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/260316-xwkpgagx5n/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.10

Link:

https://yomi.yoroi.company/submissions/60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/57665/