s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

URLhaus-PL-20887dcf13845c3adc0f13293e2da8130a82c4cde8b0a3c31c4902efe3153e63 medium

📛 Threat Title

URLhaus payload: (bat) 20887dcf13845c3a…

Category: malware Published: Source updated: First seen: Last updated: Source: URLhaus

Description

File type: bat. Size: 13,345,633 bytes. First seen: 2026-11-03 02:39:39.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

hash_tlsh t1bfd69c322603bcfa3f6e6ec599142d404c4d3d974254c9a4be4ef8b3a6de1486fae4

IOC database

Type
hash_tlsh
Value
t1bfd69c322603bcfa3f6e6ec599142d404c4d3d974254c9a4be4ef8b3a6de1486fae4
First seen
Last seen
Attached to this threat
Appears in
3 threats
Description
TLSH of URLhaus payload bbc6084f840cf1fc…

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

hash_sha256 20887dcf13845c3adc0f13293e2da8130a82c4cde8b0a3c31c4902efe3153e63

IOC database

Type
hash_sha256
Value
20887dcf13845c3adc0f13293e2da8130a82c4cde8b0a3c31c4902efe3153e63
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
URLhaus payload hash

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

hash_md5 4f2d189699d5657b73ce2e10d2c65b7d

IOC database

Type
hash_md5
Value
4f2d189699d5657b73ce2e10d2c65b7d
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
URLhaus payload hash

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

hash_ssdeep 49152:gyjzb1zf1ashb/lcg17d1wxhq1+dxnsstwu5ju2wrtmbgs4as+hq8jxk9pxyhdzj:8

IOC database

Type
hash_ssdeep
Value
49152:gyjzb1zf1ashb/lcg17d1wxhq1+dxnsstwu5ju2wrtmbgs4as+hq8jxk9pxyhdzj:8
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
ssdeep of URLhaus payload 20887dcf13845c3a…

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

References (2)

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.