MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e
SHA3-384 hash:	c4f405fa297d128b74b08e97c2e5ed8d4a48c2b3c7a68e86b641b7d980845e6b3858f2e8e65231dbc4f3f7edc473a41f
SHA1 hash:	46a203240b7b06ec66058de2ab459d24c3545993
MD5 hash:	a8ad1697e8c8823ac7b77557bcb85a24
humanhash:	pasta-oscar-neptune-may
File name:	998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e
Download:	download sample
Signature	AmosStealer Alert Create hunting rule
File size:	521'440 bytes
First seen:	2026-02-11 22:06:53 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	12288:j6TamwVU71+KFwT+Mbc3GmH3hBOGpLdhHEiU7777MMMroTZ6:j6TE8FxBOGpLLX
TLSH	T11AB409E3223859F2D98EF77CF00F2267F976BD4115B8A5D55E810E110ED9360EA2D38A
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	JAMESWT_WT
Tags:	91-92-242-30 AmosStealer machO

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

77

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=698cfda02afa47e5c6460a02

Tags:

n/a

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

macho fat

First seen:

2026-01-28T23:38:00Z UTC

Last seen:

2026-02-10T02:04:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e/

Neiki Family.AMOSSTEALER

Verdict:

Malicious

Threat:

Family.AMOSSTEALER

Link:

https://tip.neiki.dev/file/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e

ReversingLabs TitaniumCloud MacOS.Trojan.Amos

Threat name:

MacOS.Trojan.Amos

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-01-29 04:13:00 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

15 of 36 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=tggdrnbqbf2htmavu2gzino4lomgqqizookxfjg76epaqwebdb7a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/998c38b430097479b015a68d9435dc5b98684119739572a4dff11e085881187e