MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4
SHA3-384 hash:	7a023cfc6529e84270994ff9a3cb75dfabffdade73503a5c2a37335cdb1a3aef964186f201fd54e646fb6c88e0244d5c
SHA1 hash:	3356991e6fe8dbb821ea29f9f3f67079302679d0
MD5 hash:	ccd7c9da6bc9914fcd89d63ea06d0c38
humanhash:	kansas-georgia-kentucky-pennsylvania
File name:	PPZTuAsEUYpajFq.bat
Download:	download sample
Signature	Koadic Alert Create hunting rule
File size:	14'021'160 bytes
First seen:	2026-02-07 10:25:28 UTC
Last seen:	Never
File type:	bat
MIME type:	text/plain
ssdeep	393216:G99iBtmYxR2HkPMTFoLVES1Wq4F6rIeU3/Kn:NBtmIIHkLEfqh0X/c
TLSH	T1ABE623644EBDAB2D3308C59CD297939F208BF47DA27CE18FD89BF6A31D872169452530
TrID	45.4% (.MP3) MP3 audio (ID3 v1.x tag) (2500/1/1) 36.3% (.TXT) Text - UTF-16 (LE) encoded (2000/1) 18.1% (.MP3) MP3 audio (1000/1)
Magika	gzip
Reporter	smica83
Tags:	bat Koadic

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

69

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN

Malware family:

n/a

ID:

1

File name:

PPZTuAsEUYpajFq.bat

Verdict:

No threats detected

Analysis date:

2026-02-07 10:28:27 UTC

Tags:

lua

Link:

https://app.any.run/tasks/b6169385-5284-4a02-89c5-eaa46ec1bf4a

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/52568/

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.59162564.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6987134ab1f983b846843677

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

cmd lolbin obfuscated

Link:

https://www.filescan.io/uploads/69871347930564ff3c90dc15/reports/fbdb7f90-7c08-4bdc-bd64-9eee543b758f/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4/results?tab=lookup

Joe Sandbox Koadic

Result

Threat name:

Koadic

Alert

Create hunting rule

Detection:

malicious

Classification:

evad

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1865155

Signature

Found large BAT file

Yara detected Koadic BAT payload

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=42iapkiajsyuuyq3is7elttlgdhgrxa2iasdutqgykpbwc7hu6sa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/260207-mgl9msbs8b/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.25

Link:

https://yomi.yoroi.company/submissions/e69007a9004cb14a621b44be45ce6b30ce68dc1a40243a4e06c29e1b0be7a7a4

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/52568/