MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 53b2d24c9aefe01a768f6e2c637ab9fd56dcede852925cec18eccae58dfecec7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	53b2d24c9aefe01a768f6e2c637ab9fd56dcede852925cec18eccae58dfecec7
SHA3-384 hash:	f2da1e248f5e37383fdbe5f6d13f736d598cbef084673fe0fdc2cb10569d7c1860d874eb030f6b36ca98d7db8a8177a5
SHA1 hash:	a8c4c376a2125e2507ab5dfeae6f299f0a6234ad
MD5 hash:	0c56a75870a47a01374c6a2884c8d643
humanhash:	virginia-undress-zulu-october
File name:	YZi Labs - Audit Confirmation Form - June 30 2026.docx.scpt
Download:	download sample
File size:	134'308 bytes
First seen:	2026-07-20 20:54:39 UTC
Last seen:	Never
File type:
MIME type:	application/octet-stream
ssdeep	1536:2m+f2ClM3spCuyOp6EBS8JSsEi2apEL72fv3eVuIn6KoFccMsTxk:wVV8LOpo8JSsX2xL723e1o2sTxk
TLSH	T1C6D34CAA23E13628ED57B8F5C2CBDB7173B360145FAB48056AC68FF9424C471DBD6224
Magika	unknown
Reporter	smica83
Tags:	DPRK scpt

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

9

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a5f000d85479d70bfb78d48

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6a5f000830871cd57e0ff105/reports/f144ef47-bfe4-4b6f-9837-15b91073d09c/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

executable.osascript

First seen:

2026-07-18T17:07:00Z UTC

Last seen:

2026-07-21T17:25:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/53b2d24c9aefe01a768f6e2c637ab9fd56dcede852925cec18eccae58dfecec7/results?tab=lookup

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud MacOS.Trojan.Generic

Threat name:

MacOS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-07-17 03:52:02 UTC

File Type:

Binary

AV detection:

10 of 37 (27.03%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=koznete257qbu5upnywgg6vz7vlnz3pikkjfz3ay5tfoldp6z3dq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/53b2d24c9aefe01a768f6e2c637ab9fd56dcede852925cec18eccae58dfecec7