MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 25c9fc5c5564a74430b92cb658d43e441dee1b3c0f692dc2571ac2918efa9a52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	25c9fc5c5564a74430b92cb658d43e441dee1b3c0f692dc2571ac2918efa9a52
SHA3-384 hash:	fe1e220bb693560ea0c8f807b6cf8dd86329bf4583b55ef258eb8cef066d2088bd76ad28a8c3328101946ace753f311d
SHA1 hash:	23183499c17e6f5ca8888634bc3e199d12c05e3f
MD5 hash:	29580d9b25558cdefaf21c3c58e4f61b
humanhash:	north-uncle-high-ohio
File name:	x64nvidia
Download:	download sample
File size:	92'610'768 bytes
First seen:	2025-09-11 07:01:08 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	786432:f0wFj1SK3XQhLBw/tRf8UAtgPdBsHCWFI0012u5qK:f0wFj1ehLBmf84fQCWF5K
TLSH	T152187CA3A6A7C864EFB7967047DA631F9222FC062E3094CE320C2B251F735D47667B15
Magika	macho
Reporter	_O_l_i_v_e_r___
Tags:	BeaverTail ContagiousInterview machO

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

343

Origin country :

AU

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68c27564b20052598879b1dd

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

anti-vm

Link:

https://www.filescan.io/uploads/68c274c6dbc6f5a29c3f97b3/reports/4e96313e-403d-4f34-8fc9-d63fbdb37f9b/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/25c9fc5c5564a74430b92cb658d43e441dee1b3c0f692dc2571ac2918efa9a52

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

macho x64 le

First seen:

2025-09-11T18:15:00Z UTC

Last seen:

2025-09-11T18:15:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/25c9fc5c5564a74430b92cb658d43e441dee1b3c0f692dc2571ac2918efa9a52/results?tab=lookup

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

Mach-O

Link:

https://malprob.io/report/25c9fc5c5564a74430b92cb658d43e441dee1b3c0f692dc2571ac2918efa9a52

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud MacOS.Trojan.SAgnt

Threat name:

MacOS.Trojan.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-11 07:13:43 UTC

File Type:

MachO64 Little (Exe)

Extracted files:

1

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=exe7yxcvmstuimfzfs3frvb6iqo64gz4b5us3qsxdlbjddx2tjja._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.