MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 05a995a57bcfa0083a95ee8e17b01d94f4ef00079a2eaf101fb1fd6f43da0eb6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	05a995a57bcfa0083a95ee8e17b01d94f4ef00079a2eaf101fb1fd6f43da0eb6
SHA3-384 hash:	b95aaf018022cae5fca1d7351531a2c9a6468851642a1a8a4ea386b287887169f2a6a7889bbcd1db9e337201d8cfc884
SHA1 hash:	613d27da4e8e3d9e551c82b3632a8393501738cd
MD5 hash:	edb5c189f70f6695f25fc077b64dc5f7
humanhash:	magnesium-triple-blossom-butter
File name:	3a3d07361e69d27c194540a1f57e479270fb1a20ab9ff01996a15c05aa55ea62.sh
Download:	download sample
File size:	836 bytes
First seen:	2026-01-17 20:56:09 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:+mhtr0heJx0T70pO/YB+LoiIEky1jdU+rkITBxDsF8SQ:+c0hL+OABioidBdJkINFsF8/
TLSH	T1D001865EF0433E231E9295C08C488B49088BAFAFED8BD9550460D3183F19F2880E3845
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	aachum
Tags:	appolobase-com macOS sh

iamaachum

http://appolobase.com/curl/3a3d07361e69d27c194540a1f57e479270fb1a20ab9ff01996a15c05aa55ea62

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

204

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

infostealer

Link:

https://www.filescan.io/uploads/696c944c2ea17ed8995266ba/reports/0e4159ac-5aa5-47d6-9cb9-9a2bd8be5b83/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-01-17T21:22:00Z UTC

Last seen:

2026-01-19T09:15:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/05a995a57bcfa0083a95ee8e17b01d94f4ef00079a2eaf101fb1fd6f43da0eb6/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/516525f9-8385-4fa8-b5fb-3b0f94b331ea

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

1%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/05a995a57bcfa0083a95ee8e17b01d94f4ef00079a2eaf101fb1fd6f43da0eb6

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud MacOS.Trojan.Generic

Threat name:

MacOS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-18 08:05:58 UTC

File Type:

Text (Shell)

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=awuzljl3z6qaqouv52hbpma5st2o6aahtixk6ea7wh6w6q62b23a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/05a995a57bcfa0083a95ee8e17b01d94f4ef00079a2eaf101fb1fd6f43da0eb6