MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e
SHA3-384 hash:	e796ed852b31b6a255ddacd4f3231c6e9711f36057561522a5a4a24979aeba208efd5102a20e3ca05e893536bc32c73d
SHA1 hash:	24aaf2d9681bf52d5fe08025455f2350a63ad481
MD5 hash:	19c4e1be90d6ccd8f4bf503499b5800e
humanhash:	colorado-single-east-kentucky
File name:	7642f7bcd50f72ae34bfc24a29c8f294d257918d5bf3acdad800fc10a16e686d.curl
Download:	download sample
File size:	67'632 bytes
First seen:	2025-10-25 12:11:37 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	192:T6ir2kTJrLQ48OIt746iDddC/EtT/VzqX5h+WAqVg6iDdN:T6irLQ4hYC0X6WAqe
TLSH	T10E63EA12A79DA866C88DC63891E7032FE570F5644BE1470B4F42CF296EC53D17A30E5E
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	l0psec
Tags:	infostealer machO

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

91

Origin country :

US

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68fcbec63bdc93eb05642933

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/68fcbec0c85c5c569735b9e6/reports/8c57798a-0551-4f3c-a48d-08a83385e4bb/overview

Hybrid Analysis OSX/PSW.Agent

Verdict:

Malicious

Labled as:

OSX/PSW.Agent

Link:

https://www.hybrid-analysis.com/sample/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

macho fat

Link:

https://opentip.kaspersky.com/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xhxqm772bhjslj7dpd2usw2aluvgy6mhsxpwjlt46l773dos5vha._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/b9ef067ffa09d325a7e378f5495b405d2a6c798795df64ae7cf2fffd8dd2ed4e