1.bat

Classification: Malicious

1.bat is a trojan (ASCII text). Detected by 14 antivirus engines. Linked to The Gentlemen activity. 5 sightings from 4 threat sources, last seen 2026-05-21.

Detection summary

  • 14 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: THE GENTLEMEN (G1058)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
The Gentlemen ransomware sample / support tool BMSP 2026-05-21 00:00:00 2026-05-21 00:00:00 malicious-activity G1058 The Gentlemen
Generic Malware Cyber Threat Alliance 2026-05-07 17:10:03 2026-05-07 17:10:03
Generic Malware Hybrid-Analysis 2026-04-26 20:45:06 2026-04-26 20:45:06
Generic Malware Triage 2026-04-26 20:03:24 2026-04-26 20:03:24 malicious-activity

Tags

defense_evasion evasion persistence trojan ransomware the-gentlemen

Sample information

Filenames
1.bat
File type
ASCII text, with CRLF line terminators
MD5
c215639f1cf36de5a1a867ab31c04405
SHA-1
f972e37095b25f257cd18260c33510bca8cae6e2
SHA-256
1848fa2af5371d00bc4f0346ae1f5afd843677ca87de377a3f7b2433c0b7b187
First indexed
2026-04-26 19:56:09
Last updated
2026-05-07 17:10:03

Antivirus detections

EngineDetection
AVGScript:SNH-gen [Trj]
AvastScript:SNH-gen [Trj]
CAT-QuickHealBAT.Trojan.Agent.43706
CynetMalicious (score: 99)
ESET-NOD32BAT/KillAV.NFF trojan
GDataScript.Trojan.Agent.PNTAZ1
McAfeeDPUP:Script/KillAV.A
MicrosoftTrojan:BAT/Disabler.AME!MTB
SkyhighBehavesLike.Backdoor.zq
SymantecScr.Malscript!gen1
TencentWin32.Trojan.Snh.Ojgl
VaristABmRisk.DKOH-
alibabacloudTrojan:Win/KillAV.N#!
huorongTrojan/BAT.KillAV.r