MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 92ad27531df11d88a313573da42427bcbb3e6cef9bbf9e84202e68a7368afd1b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
ConnectWise
Vendor detections: 10
| SHA256 hash: | 92ad27531df11d88a313573da42427bcbb3e6cef9bbf9e84202e68a7368afd1b |
|---|---|
| SHA3-384 hash: | 61bcaf7e516482f5e1cd2e2943387e7d3af21fd42bf2bbbe4f0bbf1a5b299339f97d84764bec17bdbce266a921ea1e2a |
| SHA1 hash: | 4b1a1af23f91218449d6199cf17f29b0b8cc0e8f |
| MD5 hash: | 722c5649162fbabe35a3fffae8b5670d |
| humanhash: | delta-september-east-nine |
| File name: | adb_setup_vn.bat |
| Download: | download sample |
| Signature | ConnectWise |
| File size: | 2'526 bytes |
| First seen: | 2026-09-04 07:26:32 UTC |
| Last seen: | Never |
| File type: |  bat |
| MIME type: | text/x-msdos-batch |
| ssdeep | 48:cMl9OMNZdaTnMNPaFjpayuARnfdL6oDOzJN/rEWWAl7AN06MBj9acLywiLp:cMjXz2uPH7APLtAJO1WciBB5JOV |
| TLSH | T15151844E781D54244D32CA92D77BE4DCECE9DF56AA3358C0B1219106988CAFCFB4D086 |
| Magika | batch |
| Reporter | Anonymous |
| Tags: | bat ConnectWise |
Anonymous
screenconnectIntelligence
File Origin
# of uploads :
1
# of downloads :
172
Origin country :
CHVendor Threat Intelligence
Malware configuration found for:
BatchScript
Details
Malware family:
n/a
ID:
1
File name:
bat
Verdict:
No threats detected
Analysis date:
2026-09-04 07:31:05 UTC
Tags:
n/a
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Verdict:
Malicious
Score:
94.1%
Tags:
trojandownloader dropper virus
Result
Verdict:
Suspicious
Maliciousness:
Behaviour
Creating a file
Launching the process to interact with network services
Launching a process
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
DNS request
Connection attempt
Sending a custom TCP request
Sending an HTTP GET request
Verdict:
Malicious
Labled as:
XPL.ADODB.Generic
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-09-04T05:41:00Z UTC
Last seen:
2026-09-05T21:30:00Z UTC
Hits:
~10
Score:
38%
Verdict:
Susipicious
File Type:
SCRIPT
Threat name:
Win32.Trojan.Malgent
Status:
Malicious
First seen:
2026-09-04 07:27:29 UTC
File Type:
Text (VBS)
AV detection:
9 of 24 (37.50%)
Threat level:
5/5
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
8/10
Tags:
execution
Behaviour
Runs net.exe
Suspicious use of WriteProcessMemory
Executes a command shell one-liner
Executes a VBScript file via the Windows Script Host.
Badlisted process makes network request
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.