Suspicious ^85% Download

1c6ed67e1f3f3d53b5fd66132885058f3eab295a37942159c5cee1275c4afc96.bat

Abobus obfuscator indicates malware

Abobus batch obfuscator outputAbobus batch obfuscator marker

SHA-2561c6ed67e1f3f3d53b5fd66132885058f3eab295a37942159c5cee1275c4afc96

Evidence

CJK Han ideograph sequence line 0

0����>nul 2>&1 &cls
@e%���������被字法^%ch%的�����^人神法%^%魔這��人凡^息%o o^%��此�

Arabic script detection (Arabic/Urdu) line 135

135&fo%ﮚ^ﮢﺖ��تﮚ%%ﭲﺹ^ﺼ﷽﷽ت%^R /l %%i iN (1,1,1

Abobus batch obfuscator output line 946

946�%^t ����= c
@:ABOBUS-OBFUSCATOR

;SE^T "__author__=EscaLag"
;SE^T "__github__=this was mad

Japanese script detection (Hiragana/Katakana) line 1082

1082■_■)ノヾ(⌐■_■)ノ┌( ಠ_ಠ)┘(⊙ω⊙

Batch short-var percent slicing line 1990

1990%l /f/q tmp)
;@@%PuBLic:~4,1%%PuBLic:~5,1%t "维耻耻艾=V%P