PO.bat.exe

Classification: Malicious

PO.bat.exe is a malicious file sample. Linked to Remcos, Crossrat malware. Reported by 3 threat sources, last seen 2026-07-25.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REMCOS (S0332) CROSSRAT (S0235)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
CrossRAT ThreatFox Abuse.ch 2026-07-25 01:23:24 2026-07-25 01:25:04 S0235 CrossRAT
Remcos Triage 2026-07-24 12:16:16 2026-07-24 12:16:16 malicious-activity S0332 Remcos
RemcosRAT MalwareBazaar Abuse.ch 2026-07-24 12:15:49 2026-07-24 12:15:49 malicious-activity S0332 Remcos

Tags

remcos remotehost discovery rat jar.crossrat trupto

Sample information

Filenames
PO.bat.exe
MD5
2c44374da92d90d26c774499aec98ad9
SHA-1
4a099af54f71818a97bf820d96c6643290db6d20
SHA-256
1a259452b94a1ec811209f31cfbf6987b4dc4938a705fbd085087c9a7830ac8d
First indexed
2026-07-24 12:15:49
Last updated
2026-09-18 13:55:30