MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5
SHA3-384 hash:	16c22cc9c9b0669f8270353e93f3800ddbe60fb1b0c5e8b66e8f54e5920e984a8521d35bbea0edc9af26723c98ae8503
SHA1 hash:	75e84f5172e14a9aa87c6ebc730737e8a81a5427
MD5 hash:	b5779dfe16f84ecf7b60198ee65e1475
humanhash:	missouri-papa-bulldog-stairway
File name:	ops_loader
Download:	download sample
File size:	381'320 bytes
First seen:	2026-09-25 20:07:47 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	6144:xTFsCkQSUaW2A3dPCIB5SPYdkW5uq+22DBJafPyPHGn7dMouax0dkFf:xTFsCgUaEVBp5uq+2shorf
TLSH	T1F8849F12661C983AC4C6B1BC5B9B47E26625FC34167292A92B50F3148FB5BD05B3EF33
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	smica83
Tags:	machO

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

base64 expand lolbin

Link:

https://www.filescan.io/uploads/6ab6d4b25c45794b55d42192/reports/1bd239f1-7ccd-4423-99c4-b7448b91cc13/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

macho fat

Link:

https://opentip.kaspersky.com/3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5/

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-08-05 00:45:54 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=giqkz7uk7zz4tpxmcfyuzok6gjgfn7rtq3crbh6njs23usdtyosq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3220acfe8afe73c9beec11714cb95e324c56fe3386c5109fcd4cb5ba4873c3a5