MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c
SHA3-384 hash:	20d62d037db0c934fd9ca5b2ffbe71159ca3821894511d184e30e26a76fb04b2e750e53a24671a791200d1569ac651eb
SHA1 hash:	59ea0e29f656fd9a035e4b62c3e137c080842aa4
MD5 hash:	11f757550de8b2ba07ef20ce7e00d8ff
humanhash:	lake-equal-earth-solar
File name:	Pure Paste_1.14.2.dmg
Download:	download sample
File size:	638'939 bytes
First seen:	2026-09-22 15:32:51 UTC
Last seen:	Never
File type:
MIME type:	application/zlib
ssdeep	12288:c/yASTI1sHNR5F6cmtlV0ciz7AJNPeGPANMDLFRu:crsHfX/qwzcfVoN6n
TLSH	T16FD48D37AE296C84DF951FFF8231D5958CD8EAC3A165C4A5BC400900BEE97D4F9287A3
Magika	dmg
Reporter	smica83
Tags:	dmg MioLab stealer

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

61

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.MacOS.Agent-BOK.93615311.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

Hybrid Analysis MacOS/Agent5.GO

Verdict:

Malicious

Labled as:

MacOS/Agent5.GO

Link:

https://www.hybrid-analysis.com/sample/0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

udif

First seen:

2026-09-21T11:43:00Z UTC

Last seen:

2026-09-22T18:58:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c/

ReversingLabs TitaniumCloud MacOS.Trojan.Multiverze

Threat name:

MacOS.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-09-21 16:41:58 UTC

File Type:

Binary (Archive)

Extracted files:

9

AV detection:

13 of 38 (34.21%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bmswdad6j4t2yt6axeiyzx7f2h7exsqzhmvn5htblvr42yfqybga._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/0b2561807e4f27ac4fc0b9118cdfe5d1fe4bca193b2ade9e615d63cd60b0c04c