MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f
SHA3-384 hash:	fb7a7dca591c2c1546b21fe3f00f625dc5eaa7a61671dcfbdb47f29caf82464d936e6c9c01ababcce3bdcedd1a6a1e26
SHA1 hash:	830df8ea67493ef32c413c3cb58d833b203ce1dd
MD5 hash:	dacb37354c4cbb9f0d8568206e7265b0
humanhash:	beer-july-double-grey
File name:	agnt.bin
Download:	download sample
File size:	330'032 bytes
First seen:	2026-06-17 00:51:28 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	3072:6rj4D482O025YpYXDXzgToAOupBukbbVL6C3KOKzuy32iQswFYv5Dak:mLiXzgccBukFwCy14eDak
TLSH	T19B647E0363BCC515D1C9A2BC1B8B4B679303FE8129B4D39A7F81A1099FA1AD6EE1D711
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	rayhanadev
Tags:	AMOS machO macOS MioLab RAT reverse-shell

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

2

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a3210691a97308eef89c5a2

Tags:

virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

exploit masquerade stealer

Link:

https://www.filescan.io/uploads/6a323363554e843ff86e202c/reports/e8f3fd02-92bc-4fee-8ad6-261222ce0e51/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

macho fat

First seen:

2026-05-06T06:31:00Z UTC

Last seen:

2026-05-06T07:11:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f

CERT.PL MWDB

Gathering data

Neiki Trojan-Downloader.OSX.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.OSX.Agent

Link:

https://tip.neiki.dev/file/4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f

ReversingLabs TitaniumCloud MacOS.Infostealer.Generic

Threat name:

MacOS.Infostealer.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-01 04:43:13 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

11 of 36 (30.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jywahfxjny7f25r73s5dcowoq5wkiuzty5uducdwtb3i74xke57q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/4e2c0396e96e3e5d763fdcba313ace876ca45333c7683a087698768ff2ea277f