MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b
SHA3-384 hash:	7dd3ade12210f292190e3aa1a7d9b4cf7438d65cfe1c3cf22c26f603e9e4f4c151f6dd35c36b005b771ca1890d0a4f03
SHA1 hash:	bbf1cae7aea5561e4ea2775c8f369c23f4f00f57
MD5 hash:	2724ac6399fb10c64f39999373894a9f
humanhash:	ack-queen-texas-pluto
File name:	minst2.bin
Download:	download sample
File size:	140'184 bytes
First seen:	2026-04-21 18:04:25 UTC
Last seen:	2026-04-23 08:13:49 UTC
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	1536:yjgynM0Vsv2IDlwSJr9jg6K8rVDVg0ZXATTX5:G0woxDVxZXATTp
TLSH	T15CD34213126B6B13D8CA77B46B8B7369E314FE413DE499F9AD9183C08FE564B6823740
Magika	macho
Reporter	mauroeldritch
Tags:	DPRK Mach-O Man machO macOS

mauroeldritch

Lazarus' Mach-O Man Stage 4 - Persistence

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

316

Origin country :

UY

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69e7bc4151cce3ff702edf19

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/69e7bc3781aa9ec3bc1c6c31/reports/9302726e-abae-4d3d-8fab-dddff0b97770/overview

Hybrid Analysis Malware_

Verdict:

Suspicious

Labled as:

Malware_

Link:

https://www.hybrid-analysis.com/sample/4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

macho x64 le

First seen:

2026-04-22T04:27:00Z UTC

Last seen:

2026-04-22T04:39:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

Mach-O

Link:

https://malprob.io/report/4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b/

ReversingLabs TitaniumCloud MacOS.Trojan.Multiverze

Threat name:

MacOS.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-21 18:04:47 UTC

File Type:

MachO64 Little (Exe)

AV detection:

8 of 38 (21.05%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jmektyrbuifyajgpo6grcnzswpqs2nrskarr46f24e5r6hobjfnq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4b08a9e221a20b8024cf778d113732b3e12d363250231e78bae13b1f1dc1495b

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

any.run

https://any.run/cybersecurity-blog/lazarus-macos-malware-mach-o-man/

  

Dropped by

Mach-O Man

  

Delivery method

Other