start.bat

Classification: Malicious

start.bat is a malicious file sample (script). Linked to Koadic malware. 6 sightings from 3 threat sources, last seen 2026-04-14.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: KOADIC (S0250)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-04-14 17:45:05 2026-04-14 17:45:05
Generic Malware Triage 2026-04-14 16:56:40 2026-04-14 16:56:40 malicious-activity
Koadic MalwareBazaar Abuse.ch 2026-04-14 16:56:19 2026-04-14 16:56:19 malicious-activity S0250 Koadic

Tags

malicious

Sample information

Filenames
start.bat, 3fa264b936c1c55741804d8a939adb64a6bd538ccc160f6dbbc47031b2ba48c4.bin
File type
DOS batch file, ASCII text, with very long lines ( ...
MD5
61b5471d34afe91a2f0941a002703f08
SHA-1
c29c52c25c92430dfff2b99197a7ac0bf62bd254
SHA-256
3fa264b936c1c55741804d8a939adb64a6bd538ccc160f6dbbc47031b2ba48c4
First indexed
2026-04-14 16:56:19
Last updated
2026-09-16 12:44:04

Network contacts

172.67.215.99 54.38.153.252

DNS requests

dump.win