Suspicious ^85% Download

b1229de39cb00e8c982795ee3cb3219e073574fdb2120055a85c07e9998dd89d.bat

Obfuscated batch malware

Abobus batch obfuscator outputAbobus batch obfuscator marker

SHA-256b1229de39cb00e8c982795ee3cb3219e073574fdb2120055a85c07e9998dd89d

Evidence

Arabic script detection (Arabic/Urdu) line 0

0����>nul 2>&1 &cls
@e^%ﮕ���^���ﭲ�����%%ﮕﯤ��^﷽ﮕ���%c%ك^���������ﺹ%ho of%��ﯔﺖ^

CJK Han ideograph sequence line 285

285%複貼^法已��無%%魔魔行^上複被%QU 0 e^xi%法^這�

Japanese script detection (Hiragana/Katakana) line 508

508■_■)ノヾ(⌐■_■)ノ┌( ಠ_ಠ)┘^ヾ(⌐�

Abobus batch obfuscator output line 1387

1387��%t 𝧽= c
@:ABOBUS-OBFUSCATOR

;SE^T "__author__=EscaLag"
;SE^T "__github__=this was mad

Batch short-var percent slicing line 2328

2328��ﭫ^◯ﺹ%t
@%public:~4,1%%public:~5,1%t "���艾艾艾=LI1