MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95
SHA3-384 hash: fd9fd36d7b8ab9b79c5b40e04fee044794153ef9ae5b8cf56bfdaa22f9a896caea8ea90755f43d610a409bcb39fc58f8
SHA1 hash: 38fcabba4061ae3ca5a4d3b6273120f88f3038f2
MD5 hash: 16cde43dbab12812177211ed6c28b4e7
humanhash: papa-october-four-jersey
File name:runSetup_macOS.dmg
Download: download sample
File size:458'943 bytes
First seen:2026-02-04 12:55:46 UTC
Last seen:Never
File type:
MIME type:application/zlib
ssdeep 3072:86/2x6A99US8N3aKOEv30AX+pW9r2zHD5fv1wLGqThKyDHGKF6LBnDlXo8a2R:866hgxz3P/99r2RlwLhT81LBnpXPa2
TLSH T1E4A4E637BE695D84DF950EFF8221D5A58CC8E9D391A5C0E1BC400901BEE9BD4F9683A3
Magika dmg
Reporter l0psec
Tags:dmg infostealer macOS xor

Intelligence

File Origin
# of uploads :
1
# of downloads :
30
Origin country :
US US
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=698341f56b1af47db72ccc35
Tags:
n/a
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95
Result
Gathering data
Verdict:
Malicious
File Type:
udif
Detections:
HEUR:Trojan-PSW.OSX.Amos.bg
Link:
https://opentip.kaspersky.com/1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95/results?tab=lookup
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95/
Verdict:
Malicious
Threat:
Trojan-PSW.OSX.Amos
Link:
https://tip.neiki.dev/file/1e9e8c6e0cb3790f07804beb44bbea9335359779e34a777cefa3a774b54a9c95
Threat name:
MacOS.Infostealer.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-02-04 05:43:43 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
3 of 36 (8.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=d2piy3qmwn4q6b4ajpvujo7ksm2tlf3z4nfho7hpuotxjnkktskq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
X
https://x.com/L0Psec/status/2019031303270887571

Comments