MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b591bfbab57cc69ce985fbc426002ef00826605257de0547f20ebcfecc3724c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b591bfbab57cc69ce985fbc426002ef00826605257de0547f20ebcfecc3724c2
SHA3-384 hash:	9f161a419fdcade7a8b31f1936f4672a97e0d9db4275503f7f025d86aef5a7f011bd852d71834f0e607b4c4605231e2b
SHA1 hash:	d3509487442871a1c4475f1a1dd4cf0a293ffe70
MD5 hash:	eac0ada21e4cf4726c0ac7135eca3b0b
humanhash:	potato-papa-sweet-oklahoma
File name:	zk-call-messenger-installer-3.9.2-lts.dmg
Download:	download sample
File size:	31'476'506 bytes
First seen:	2025-12-23 10:26:54 UTC
Last seen:	Never
File type:
MIME type:	application/octet-stream
ssdeep	786432:AHOEN2oFQ1CqR3B8qVkAAqmics0Aiz8SBgS:AuEN/Q1rR8LkmfsizZ
TLSH	T168673337078A5C78C4C82534A8FF5313BDF89CFB51D22EADA9B365421D733AA685162C
Magika	dmg
Reporter	smica83
Tags:	dmg

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

4

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=694a7e04038f10550b54f902

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/694a7dfd84afa5547b5cbf3c/reports/cd6f466f-211f-4ee5-832f-56ca84fbc066/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/b591bfbab57cc69ce985fbc426002ef00826605257de0547f20ebcfecc3724c2

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

udif

Link:

https://opentip.kaspersky.com/b591bfbab57cc69ce985fbc426002ef00826605257de0547f20ebcfecc3724c2/results?tab=lookup

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud MacOS.Downloader.SAgnt

Threat name:

MacOS.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-20 08:44:21 UTC

File Type:

Binary (Archive)

Extracted files:

2718

AV detection:

2 of 24 (8.33%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wwi37ovvptdjz2mf7pccmabo6aecmycsk7pakr7sb26p5tbxetba._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/b591bfbab57cc69ce985fbc426002ef00826605257de0547f20ebcfecc3724c2