MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 79366bda3122c75fd3ac032c625b7e093a908bcb03ea444c1957e79b3ca7a44c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 79366bda3122c75fd3ac032c625b7e093a908bcb03ea444c1957e79b3ca7a44c
SHA3-384 hash: 3fffb376d5deaabd5ec0217931893e996716fdf8feb919dd9626f1d6e269f932017586413e065560a9fd1ff92c1d2fd7
SHA1 hash: 8cddd997a88e7108d00df2de6b22582a62335016
MD5 hash: e7ceed551726c7f82438c2f1476ab931
humanhash: lake-california-asparagus-failed
File name:loader.sh
Download: download sample
File size:581 bytes
First seen:2026-08-29 06:19:41 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 12:vJi5hitf8/3xgIOC2Lk5tlQMY5JhUxK1PEF+ETGmsKDE1z8w5bJxytjbmUj:Bi5EtU/3xN953QMYXhUxIPEF+ET/XE1A
TLSH T120F041DC6850AE8F14F4C0F4AE1346A27AF433B7F4E0B14A2A1803161528DC97A17463
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter BlinkzSec
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
US US
Vendor Threat Intelligence
No detections
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
stealer
Link:
https://www.filescan.io/uploads/6a927a9584c7cf9152e63079/reports/9c464851-6414-4617-a302-d26912aa70e4/overview
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/81e9dc24-4bcb-4d4c-9956-cb2b94ee0c0a
Behavior Graph:
Download SVG
%3
Score:
33%
Verdict:
Susipicious
File Type:
SCRIPT
Link:
https://malprob.io/report/79366bda3122c75fd3ac032c625b7e093a908bcb03ea444c1957e79b3ca7a44c
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/79366bda3122c75fd3ac032c625b7e093a908bcb03ea444c1957e79b3ca7a44c/
Threat name:
MacOS.Trojan.MacSyncStealer
Create hunting rule
Status:
Malicious
First seen:
2026-08-29 06:22:31 UTC
File Type:
Text (Shell)
AV detection:
16 of 36 (44.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pe3gxwrreldv7u5mamwgew36be5jbc6lapveitazk7tzwpfhurga._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260829-g4z65aw1ax/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/79366bda3122c75fd3ac032c625b7e093a908bcb03ea444c1957e79b3ca7a44c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments