SUSP_BATCH_Downloader_Jan26

Rule Info

Name
SUSP_BATCH_Downloader_Jan26
Author
MalGamy
Description
Detects suspicious batch files with PowerShell download capabilities
Score
75
Date
2026-01-21
Minimum Yara
3.5.0
Rule Hash
9fc412c8413afe4bfc9077552465e51a
Tags
['SUSP', 'SCRIPT', 'T1059_001', 'T1105']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
14
Suspicious (< 10 engines)
47
Clean (0 engines)
22

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-10-01 17:43:57
1
63
253296637dad9e0e930322ecd9b885ba817cdb192d5bbe4832517ecefe4287e2
2026-10-01 01:14:28
0
60
e4a2d1758020c9432733a7b943f8b7fce567e4245c293b6d5505690d40172019
2026-09-30 01:59:58
0
62
34d14bb503d852b8312e89ca95ec2964e18c7e0ff69f1981902afcb3b93b96d8
2026-09-30 01:51:16
0
62
b0548657fc49c2c3f61d5132323cf9a7dea971bacb16110868452b47fc12b061
2026-09-30 01:43:26
0
61
4f4c0431c6891a4074cabdf47471874d3d70206093af8b3144973ccf0e7d0a5f
2026-09-30 01:20:09
1
61
584bc9b4cd542c0b4bda0816db7860a431d2ca995cf17a083f6c34b0c87e5f88
2026-09-30 01:13:06
1
62
e1d4faebc0d7c0948368dcff871ede24dbfba8405365667eaf37649562d9ff88
2026-09-30 00:44:46
2
62
3a768dcb950ff6d136c59509dee10b2d570dd3a64b94e60bed0aedda472c979b
2026-09-30 00:42:46
1
62
fa36ad44eedf135a0e9e443d5bea9b75499b341549eee9a64b37340607fcc7fc
2026-09-30 00:41:58
0
62
d8e06d2e1126de7a36b2cd35a3533c5cbd8b0924572d1d956f9383550a42b23c
2026-09-27 22:34:46
1
59
7d96759a6aab51222d3e279db4615928f82b112cc4c6a38933baf6383d1456fd
2026-09-23 00:49:35
0
62
e44770b352c457c9442e494f0747bd97dd9bbcb0cee3ebfb624a19539770f234
2026-09-19 20:07:37
0
62
3c98d505fa6757e433d0364f5095b3c2aa195c86bfeb52e913e2c1df6621ecb1
2026-09-16 20:30:41
0
47
7ed1b343228f6001d330477d1ce093178f96c7e99b28a1eae0be7c8ecdfe153e
2026-09-03 21:44:19
2
61
68976e384cedffb8766ed0910473fec1cb74f475629ed45a8556cf96e3d23102
2026-08-31 00:23:57
0
62
424059ab7b1f5c325472d24e9b40bdf7df560e63aa85fce2194f80761e2d65ec
2026-08-17 08:19:18
2
61
d584f7f8ae9c1cc65c9e59f6b8b741a73b8c2abd996f43b7ebb8d866ed2b8913
2026-08-14 22:24:06
9
60
97dfa9a02b2a65867dd8d2046881af7f2f3c4d1064f6f941cd57348feabc0012
2026-08-14 13:52:37
8
62
1dbd3b644a1224b6023ca138a74c7781ba20137b828cbb051ce8175b71c64a93
2026-08-10 20:31:47
2
62
5a1ae5fc0b4824a876e238e5efdd14b263133582c4969a9ee2fce3a139675cb5
2026-08-10 20:14:27
2
61
9957b18239cdc3a0106c382bbdba3d71c3f1ba5f7a7a57a2eb21c6b059a790b9
2026-08-10 01:22:36
8
62
ca04f79eccd35480bcb8acd9c49632259a19d17031657a7d48aa7ea375d47cd0
2026-08-09 20:20:27
2
61
e1ed5b7e38aa61d9af9d82347b136acb0e9fa236c2032ce5ba54c85a371afe9d
2026-08-07 15:02:57
2
61
1554f3ab18cc232e7715c6fb22993aa9487f6632314cd3d62dd3f172838b0c43
2026-08-06 10:08:57
7
61
6a776ed7cce3846d131b473eed3d820f12aeb485dbfa8c88e44539cc5d5714f8
2026-08-03 02:18:16
1
61
3638de1a50069e3b8ae55d4b471d317919833173b2a9f49d28f317371ceddf1a
2026-08-01 06:33:16
2
62
856915839db9be97d8cb05a174c00536e90a5d1bead6c26f4ad92102e2644a0b
2026-08-01 06:33:16
1
62
cd1ae3cf54e4110e3e120febc7853e929505cf0b5da61b97183ac0b0e563a499
2026-07-29 16:33:12
13
61
b9b3cdf17a018b15fa5fe0575f540e00af0a3dec3e21d10e6b8708f6e907af0d
2026-07-25 11:42:47
1
61
361db8eda5c946e2feaa02e2f2bde823a7118b050b1d4a7997bcc60e80ac2265
2026-07-25 11:35:26
1
62
dc3e05043fdd3d17302b89af5b8998555e4f77e3f40f0fa46716ef1b81ce51ab
2026-07-21 14:22:26
9
62
db0c15a4e5d4c66e53531f228ac0c147f4294a8787019b6e0449125794db482b
2026-07-14 10:07:27
0
62
ac5ced08e96db50e51f56d28abaa68dffe5b18defb3f64a7e2790a6f802b046f
2026-07-09 20:51:17
10
61
86e142c0c29273a492b0ba82238057dbc552a76d30a1f60f1a5f05484bfa8516
2026-07-07 17:03:56
1
63
4c612f87ef28ed9b51cc0e3dca07778484b3d241c2c4dc6f17e9b2b423d6f959
2026-07-05 12:54:39
19
61
ba38819c2eb792b1866116a0f561a2f7064a066f2426b4dda54d268cbc3d7480
2026-07-04 19:17:15
10
61
7287b66874398090ab81d1fc642563f3b1e2d48b85f05db9c621fa5b916597d9
2026-06-29 23:28:38
9
62
489b5aad2e3b433ab0a841abce7b7fb9f080348659daec075246a0a4b2a432e7
2026-06-19 11:05:14
8
61
93eb626ccf1925b4658e967d6c950c9613ec304f28126d140d47495966212e1b
2026-06-10 16:37:40
4
60
bf5283367dbdccc69ad0e22299f66397e9bd95c961d841365e42d2e6397f5a37
2026-06-09 01:33:24
0
62
322c0e283ed59f84695e11ec15b7e7b597b2da4f0febadf21e0222b2fb74d5aa
2026-06-05 20:18:14
0
61
a4fcca8484cbede20aabc850180fdb7c6978b0ab12d70977eea05924174c49b1
2026-06-04 14:28:44
12
62
46107768b5a38e349b5a113bf996e01f0154bdaeffdcf3388da7ba1a8c6e3b54
2026-06-03 03:21:37
0
62
d9dff3a249ed30a9824f0ced1b7d1f5cb26bcaa624abd493396ab7a71a60ddcc
2026-05-31 02:07:04
2
62
31c7af3bfd03ca94a5bdbe84446c9d72e34cdca9d67f2f244c0b5af771453cdb
2026-05-30 18:17:24
4
62
9ad0b137803ba0f6160111a5cbffb6935c6295ba3b956af0a830784b7673df5f
2026-05-28 09:24:36
1
62
6b747316e1d40d62e76e5c7c7d293d21ecd649e742cea71bfccd555dfabe4c3a
2026-05-26 20:08:54
2
57
4607e132b885690154999c58d416332e534e7891ff37a33e20cecccde64fef89
2026-05-24 22:29:55
8
62
32d7ef02543431ccf9e63944b13364b9436e7420bfbcbf49d0ba24f5633d3a39
2026-05-24 21:54:44
10
62
e0743331c87ce078ea5a5e152c913a1145267692400cd04700d110c7e8c83089
2026-05-22 19:54:45
0
59
a8b7275ebf2a5c76fc46ac039a298045547f1ed2f56906cbe2b57a41acbf0457
2026-05-13 19:21:16
0
62
c4e297e719ecc0613a01c0d35dbe164d0873238914142b939153bee5bb6d6c1b
2026-05-11 19:13:45
2
56
f8202a2e2f51eac1ce7353dbcaee12c2743a1254c13d234e9ee525d53a0dc42a
2026-05-11 13:30:07
7
60
17ba222b109eea63cf95fc4cdf809a4f3db1ea16c276331d81bafcbb070cfa6d
2026-05-10 19:13:55
11
45
f792e10ef92cbb5869d00be73930668f855b50ea89720639d4d1d7cc36de3cc8
2026-05-08 05:13:03
1
62
5addda0e7bbc3bac19d1b8cd54553018364338bca6d7caa2b67dab0cf2c5d708
2026-04-30 10:58:44
9
61
09bd23b1234d7dfa5304999dfbd9664568b8ce06c1bc6b2627f82d47cac044c1
2026-04-19 00:02:05
1
63
7fc8f65813905e4828572e5a56db64632bbae427136a9033f9f033712b644180
2026-04-15 23:03:36
9
63
dc85212226c0d1bc3726dda1bc8a57b980f418bbfdd80aa8d4914842df8f4c73
2026-04-15 14:40:54
0
61
c0b3f08d8e06d770b8fd095f5e733021c144a0732fe1c87ac135d69af98a83a6
2026-04-12 22:13:06
9
59
b10eb435a2a227a8419baeb1ac2b7b9c4de9b6f9403c634f2fba3302d7cc478e
2026-04-11 23:06:14
11
63
2e041fb513ac8b7012c1c393da8f45554ac26c6abeb5b2cbcc7f77a01b820cf3
2026-04-09 02:41:43
8
63
136b7f998f5b87ffaf2dd30a8d1b75f19db722153f1297a1e9144b191a266e2d
2026-04-09 02:36:58
12
63
0403ca310633c961da7b5ac4f99bd15a16886c06f11b32b7e5655b0fa6ee4114
2026-04-09 02:23:49
16
63
0c235b9c327bbeb73013bbf1ed4e6f603e5bf2d8900530dd74a85b6c1e2f1f40
2026-03-26 08:44:24
7
63
4e0706057134016f6b8b0e56f2426fd4b6e800195d6dad2db0791b5a3873a1b0
2026-03-24 18:06:04
18
63
e9c667754ed67b763da29615334b3f401fcdaf40f497f230d2eedda8d7e93ae4
2026-03-24 18:01:25
4
63
e13b2c5acda1f073766cf515ee86c792ba5089b90e29635dc693a59196ccffd5
2026-03-24 17:42:06
9
63
2e1e7c2cf075d8deea516d9e3e23daf976ce4f752b6ed034efb23e6bd981dcbe
2026-03-10 15:29:25
0
46
6a3a82c90655f2545003e5456b2f610d69a12405403bea82a06cbee260c0b60c
2026-03-05 08:22:15
19
63
7420ac0164bb705eb0a786c3cb894881c2ee15b1feeeb915d494aa622e14e900
2026-03-04 07:48:48
0
59
1b195ac59e1764dfdbc7053f9ed6cc9461692a1ccc34611794d4b676094aa683
2026-03-04 07:48:16
0
61
a352bbec5587a77bb3d406bc7bd0709b30d5904c6703f03d08978969b79a96a3
2026-03-04 07:32:46
2
61
534edc18d105b27e7d18ac8c6de2e64150b610a7dfb3173deb3ab1657f183e85
2026-03-04 07:28:46
0
63
5a86e648b76c2546ce9f31ceb1666a597909a53c233a318cbcf107e1f73c26aa
2026-03-03 16:00:32
11
63
61e09708e49e4c56dd4a4835e804fa42e9b212a83d5b617cb7bf372868077ab7
2026-03-01 02:35:28
2
55
32e0afa46d2b092d137ddab56347429637fb9cc23d9117eb0f246dff343927a8
2026-02-24 05:55:15
2
59
0020e6f558a4973142ce37ed015c1aa18ebdb11d08f0217441db4365bfe34903
2026-02-24 05:01:44
0
63
6e59f588d6dde0cbb2527444f71e3352d3dee57e67bfcefb5093e1ba1c8d379d
2026-02-23 12:36:25
7
62
57ecfb148528d28661f6c8ded429246703dbd08da6b4740aeb956597f6501678
2026-02-19 14:05:55
0
62
ccd0bbc32be6413de8d76e621ddf080e0bcc133e6a0fb48d1677b96dd5a777b5
2026-02-09 16:40:16
33
63
6ae4222728240a566a1ca8c8873eab3b0659a28437877e4450808264848ab01e
2026-02-04 04:20:47
8
63
fba1f3cab13932bb09d8784732d86390268ee7198c9f4a0d5693392070476242

Rule Matches per Month (last 24 months)