Photo XRay Ultrasound Medical Records C1203.bat

Classification: Malicious

Photo XRay Ultrasound Medical Records C1203.bat is a malicious file sample. Linked to Koadic malware. Reported by 2 threat sources, last seen 2026-03-13.

Detection summary

  • 18 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: KOADIC (S0250)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Triage 2026-03-13 11:08:36 2026-03-13 11:08:36 malicious-activity
Koadic MalwareBazaar Abuse.ch 2026-03-13 11:08:18 2026-03-13 11:08:18 malicious-activity S0250 Koadic

Tags

defense_evasion execution spyware stealer

Sample information

Filenames
Photo XRay Ultrasound Medical Records C1203.bat
MD5
6d184529b130e94ab606897aa21a1622
SHA-1
17e7e9825336c4da743c6e41c9a9847ebade1867
SHA-256
ee26e23429e2a93a9ec1a83a7dd490deb2035fa3a3b5ee8feea16d8612441272
SHA-512
2fda06d0f8c73408b4edd076656b1c42fd138fed7d232d5887dd33ae91a719ff33fe6b8f3973eb33364e61ff208246b9fc253a60f981ea7aa28ad44d55a25c0c
First indexed
2026-03-13 11:08:18
Last updated
2026-06-16 01:44:40

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.79698836
Antiy-AVLTrojan/Win32.Alevaul
ArcabitTrojan.Generic.D4C01B94
BitDefenderTrojan.GenericKD.79698836
CTXunknown.trojan.alevaul
CynetMalicious (score: 99)
EmsisoftTrojan.GenericKD.79698836 (B)
GDataTrojan.GenericKD.79698836
GoogleDetected
IkarusTrojan.Win32.Alevaul
KasperskyTrojan.BAT.Agent.crk
LionicTrojan.Text.Alevaul.4!c
MicroWorld-eScanTrojan.GenericKD.79698836
MicrosoftTrojan:Win32/Alevaul!rfn
TencentBat.Trojan.Agent.Fwnw
VIPRETrojan.GenericKD.79698836
VaristABmRisk.JGUW-
alibabacloudTrojan:Win/Agent.cxz