MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 e0dc74e1069d16fbec35b392b247a13bf14ccde705e067f551d94abc74215455. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 7
| SHA256 hash: | e0dc74e1069d16fbec35b392b247a13bf14ccde705e067f551d94abc74215455 |
|---|---|
| SHA3-384 hash: | 688782021ad7bdbbc7490b61c89a55026e1e370ff726a934cd268f71c762053405e6b071b7c6f2c446b0da06945fea60 |
| SHA1 hash: | 1d38fd3bb1e6299b7ccd664c37ad0b600952dba1 |
| MD5 hash: | 01b904c0ddc9dd42dc45796819a4686f |
| humanhash: | three-nebraska-timing-colorado |
| File name: | file |
| Download: | download sample |
| File size: | 2'963'848 bytes |
| First seen: | 2026-02-15 22:17:18 UTC |
| Last seen: | 2026-02-15 22:59:15 UTC |
| File type: |  bat |
| MIME type: | text/plain |
| ssdeep | 12288:EJSqVo/ppQJSqVo/ppyjrFjGkIcIy4P88rHB2SwMwX7fDMwX7fVKU1JQTgfzxNNd:EJSqVo/ppQJSqVo/ppyfbQk7mAvherE |
| TLSH | T1DFD544D1D27AD674722118E7E3CE24D35F21DE82C5A8C6BD4F92DC17B18921320ED7AA |
| Magika | batch |
| Reporter |  Bitsight |
| Tags: | bat dropped-by-amadey fbf543 |
Intelligence
File Origin
# of uploads :
24
# of downloads :
118
Origin country :
USVendor Threat Intelligence
No detections
Malware family:
agenttesla
ID:
1
File name:
file
Verdict:
Malicious activity
Analysis date:
2026-02-12 00:38:45 UTC
Tags:
generated-doc keylogger agenttesla etherhiding
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Result
Verdict:
Malware
Maliciousness:
Behaviour
Launching a process
Creating a file
Creating a file in the %temp% directory
Creating a process from a recently created file
Creating a window
Running batch commands
Creating a process with a hidden window
Sending a custom TCP request
Сreating synchronization primitives
DNS request
Connection attempt
Sending an HTTP GET request
Unauthorized injection to a system process
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Verdict:
Clean
File Type:
text.html
Score:
50%
Verdict:
Susipicious
File Type:
SCRIPT
Threat name:
Script-BAT.Trojan.Heuristic
Status:
Malicious
First seen:
2026-02-12 00:37:37 UTC
File Type:
Text
AV detection:
4 of 38 (10.53%)
Threat level:
2/5
Detection(s):
Suspicious file
Verdict:
Malicious
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
bat e0dc74e1069d16fbec35b392b247a13bf14ccde705e067f551d94abc74215455
(this sample)
Dropped by
Amadey
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.