MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a
SHA3-384 hash: 4c0a53cca2780b73fc2f373150fd424f4b3afaf19596c813b77c86a38e797fda7af8d98f11c5b4c3a9871e6ae307d402
SHA1 hash: 436ac67c7484be4c7ef8124dcb5fa9b7cc7aee35
MD5 hash: fcc48cb05af62de517d23056b00013a9
humanhash: sad-early-pizza-burger
File name:megenta.bat
Download: download sample
File size:983 bytes
First seen:2026-02-27 12:27:19 UTC
Last seen:Never
File type:Batch (bat) bat
MIME type:text/x-msdos-batch
ssdeep 12:SdE4S+rThZ/fz8GSCNwXGxUCEx2xsx2FRffL5GtrMGSAzIbUmn0rZofXoQX7fHn:0hZ/fz8604fwtrMOIcItTH
TLSH T14F1148D7AA12D12A551A0AA808BC51563803F0C34758ADDA3C9E7175C25A3DA83BDDFA
Magika batch
Reporter BastianHein
Tags:bat

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
CL CL
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
megenta.bat
Verdict:
No threats detected
Analysis date:
2026-02-27 12:28:19 UTC
Tags:
n/a
Link:
https://app.any.run/tasks/7657aac4-3545-4823-b2f5-d203e806d224

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/54855/
Detection(s):
SecuriteInfo.com.BAT.Rd-1.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=69a18dddc950ab5d9ab218be
Tags:
n/a
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/69a18dd410e80629d4f53b0c/reports/0dd9f1c2-e178-489a-a864-752142d4cb81/overview
Verdict:
Malicious
Labled as:
BAT/KillNLP trojan
Link:
https://www.hybrid-analysis.com/sample/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a
Verdict:
Clean
File Type:
text
Link:
https://opentip.kaspersky.com/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=tkk6mztt2xiepgzpcgjyp2q4oh2onihfvzi5ntscb6axbo3nfrna._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/260227-pnd8qahw8d/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.05
Link:
https://yomi.yoroi.company/submissions/9a95e66673d5d0479b2f119387ea1c71f4e6a0e5ae51d6ce420f8170bb6d2c5a

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:CMD_Ping_Localhost
Create hunting rule

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/54855/

Comments