MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79
SHA3-384 hash:	e6c59f3c62ba2216df6beb3a6be2b352b9fb5541c49c475a839f7b255c6c943895a7fe9d925d4b44973bc7a91f154e6f
SHA1 hash:	2d15286d25f0e0938823dcd742bc928e78199b3d
MD5 hash:	abf01633960dd77c6137175a21fccf34
humanhash:	bluebird-india-low-foxtrot
File name:	3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79
Download:	download sample
File size:	412'227 bytes
First seen:	2023-04-17 16:46:57 UTC
Last seen:	2023-04-17 16:47:18 UTC
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	6144:dsjtmdjmg8o3TMkdSFKvrhWmc/aa/YxyPy0y5ykyPpelPyrO8BrGd2//ryj4hqq1:dsj0dApBS3lPy7nn24cq1g+bKpbIfp
TLSH	T193949D099C6C1D77EAC6A0FD18504ECC710FFFA8CE5092B2728E885D9FDA695B050B79
Reporter	petikvx

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

121

Origin country :

FR

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.MAC.Ransom.D.11968.14006.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/643d78088ecb3afce931c300/reports/192335a8-5636-4bf4-a6ba-e7c787c25775/overview

Hybrid Analysis OSX/Filecoder.Lockbit

Verdict:

Malicious

Labled as:

OSX/Filecoder.Lockbit

Link:

https://www.hybrid-analysis.com/sample/3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79/

ReversingLabs TitaniumCloud MacOS.Ransomware.LockBit

Threat name:

MacOS.Ransomware.LockBit

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-04-11 17:12:32 UTC

File Type:

MachO64 Little (Exe)

AV detection:

16 of 24 (66.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hzf32ilvnlrqyjh7pvuuezll4asbhh4bqc333xkolrrktx55rr4q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79