Startupppppppppp (2).bat
Classification: Malicious
Startupppppppppp (2).bat is a malicious file sample. Linked to Koadic malware. Reported by 2 threat sources, last seen 2025-10-13.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 8 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: KOADIC (S0250)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Koadic | MalwareBazaar Abuse.ch | 2025-10-13 07:02:20 | 2025-10-13 07:02:20 | malicious-activity | S0250 Koadic |
| Generic Malware | Hybrid-Analysis | 2025-09-04 02:00:04 | 2025-09-04 03:45:13 |
Sample information
- Filenames
- Startupppppppppp (2).bat, Startupppppppppp.bat
- File type
- Unicode text, UTF-16, little-endian text, with ver ...
- Size
- 21091 bytes
- MD5
f97735af085577f513b4996a4ce35a7a- SHA-1
f95eb14219888c8a8306028f4258f273ae3ccb44- SHA-256
9f3c0bf06c8f1ebeddfc12f0303c1c98cf56e058a3ad7e2e00bbd20091fcc056- First indexed
- 2025-09-04 01:48:23
- Last updated
- 2026-03-08 20:29:38
Process list
| Name | Command line |
|---|---|
| cmd.exe | /c ""C:\Startupppppppppp.bat" " |
| powershell.exe | powershell -WindowStyle Hidden -Command "Start-Process -FilePath 'C:\Startupppppppppp.bat' -ArgumentList 'hidden' -WindowStyle Hidden" |
| cmd.exe | /c ""C:\Startupppppppppp.bat" hidden " |
| python.exe | as.py |
| python.exe | asb.py |
| python.exe | xw.py |
| python.exe | xwb.py |
| python.exe | pl.py |