MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 545f3ae82e2addca3e5f647d55bea79ee299324400269978ab137f5fbfd84a9f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments

SHA256 hash: 545f3ae82e2addca3e5f647d55bea79ee299324400269978ab137f5fbfd84a9f
SHA3-384 hash: 565b6c9f2b34f70b4361dd055fb369f20b35edcf5a4c5743f6d9ba566af51d09a004632d9a6c93d468d3d3f6386351b1
SHA1 hash: c0cc62329b4ef95f507ca03b9a69f7dcecaa3a37
MD5 hash: 9ddd4c1d51054fd4f6c8a6d74af8264f
humanhash: skylark-oxygen-skylark-colorado
File name:App.bin
Download: download sample
File size:101'216 bytes
First seen:2025-10-10 06:42:49 UTC
Last seen:2025-10-12 12:49:08 UTC
File type:php macho
MIME type:application/x-mach-binary
ssdeep 96:7Uv0EDkzEdzXv49v8J8OdTWDKODm/bXv4U8Z8Gd:oPkzEdzkvcTVWD7Obns5
TLSH T18BA33F3A9B0C4675D01D827482DF1B5A3776F6A54ED2830F5782C838BFC536A2A60A1F
TrID 82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5)
17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika macho
Reporter juroots
Tags:machO

Intelligence


File Origin
# of uploads :
2
# of downloads :
70
Origin country :
CH CH
Vendor Threat Intelligence
Verdict:
Malicious
Score:
81.4%
Tags:
stealer virus
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
masquerade stealer
Verdict:
Malicious
File Type:
macho fat
First seen:
2025-10-06T15:31:00Z UTC
Last seen:
2025-10-10T07:20:00Z UTC
Hits:
~10
Score:
86%
Verdict:
Malware
File Type:
Mach-O universal binary
Threat name:
MacOS.Infostealer.Generic
Status:
Suspicious
First seen:
2025-10-06 20:51:17 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
13 of 36 (36.11%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

php macho 545f3ae82e2addca3e5f647d55bea79ee299324400269978ab137f5fbfd84a9f

(this sample)

  
Delivery method
Distributed via web download

Comments