MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c
SHA3-384 hash:	93fb0677f4e01bf0c7cb3b32ebbb107e748258dbf20049f91123c6bda2b8bf6974fb27525cf06bf9f2ac5aac1931e4c2
SHA1 hash:	be55d62d38dd5842c32d265e9c6bfec233d6a36e
MD5 hash:	db1bfb7dfafdae97be68a62a7af69159
humanhash:	edward-fourteen-pluto-dakota
File name:	update
Download:	download sample
Signature	AmosStealer Alert Create hunting rule
File size:	235'744 bytes
First seen:	2025-01-28 08:51:08 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	1536:QbNc18lt6yxjIvhlbxGTmbdkGAyAjw9NaGIvhlbxGTmbdQAz:ic18lAKmjA/U9NadSAz
TLSH	T1263496F01FE9E841E43FA83A67E6B17CB126373BEC7E5D895460D6446AA1041FB14CCA
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	g0njxa
Tags:	AmosStealer FakeCaptcha machO macOS

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

121

Origin country :

ES

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.MacOS.AMOS-BK.82.3516.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67989d9939cd5095f12a394f

Tags:

malware

Hybrid Analysis OSX/PSW.Agent

Verdict:

Malicious

Labled as:

OSX/PSW.Agent

Link:

https://www.hybrid-analysis.com/sample/3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c/

ReversingLabs TitaniumCloud MacOS.Trojan.Amos

Threat name:

MacOS.Trojan.Amos

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-28 08:52:04 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hzlwjilaghprq5izztr5lyesvhazfkihbh6fp3v2fqe32kl4kqga._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3e5764a16031df187519cce3d5e092a9c192a90709fc57eeba2c09bd297c540c