MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0
SHA3-384 hash:	da5f4c8d619db92e0d2aa7c84746919f46815c337987779d627847403d1977385d74fe6f7547b3970f32de142513559c
SHA1 hash:	62f1bfa113830ec2bd915d9e36088860f0e6e5b0
MD5 hash:	f634cf73d9541c0c5233e0f05265e0ad
humanhash:	bluebird-lactose-twenty-october
File name:	ScreenMemory_2.5.5.dmgx
Download:	download sample
File size:	632'745 bytes
First seen:	2026-09-28 19:53:02 UTC
Last seen:	Never
File type:
MIME type:	application/zlib
ssdeep	12288:gkPtZGv2RvlH+9X28ucvP0smHTJ/P8OEwbT5UdGnjZ:gkPrGv2Rvle28h0smzA8qoZ
TLSH	T1A7D48D37AE695D84DF951FFF8232D5668DD8A9C3A0A5C0E1BC400940BEE8BC0F958767
Magika	dmg
Reporter	smica83
Tags:	dmgx

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

4

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ac0b99a4e97199d5892b52c

Tags:

n/a

FileScan.io

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

udif

First seen:

2026-09-25T06:16:00Z UTC

Last seen:

2026-09-29T19:48:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0/results?tab=lookup

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud MacOS.Trojan.Multiverze

Threat name:

MacOS.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-09-26 06:17:00 UTC

File Type:

Binary (Archive)

Extracted files:

9

AV detection:

11 of 36 (30.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=g4xywo2adpodnib2bsn4xxny27tqyafvyxe7qsiszqadmh2oxcqa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0