MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c83c2029bdf7ac0bd5cbb4a54c3b09ca65ef3c8e263804802fd78b41584c7595. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c83c2029bdf7ac0bd5cbb4a54c3b09ca65ef3c8e263804802fd78b41584c7595
SHA3-384 hash:	7b0aed3df576d2397fd4c8a2fc8223577982ea07899e9faf91630bb69f004e37844c8624996d081740d2387477da5253
SHA1 hash:	b33acd991d2196c430ab8033d0057699f8182d93
MD5 hash:	3adcd78ee808d91fb338de6d673cc55f
humanhash:	bacon-robin-ohio-single
File name:	Installer.EuL
Download:	download sample
Signature	AmosStealer Alert Create hunting rule
File size:	3'170 bytes
First seen:	2025-04-11 13:06:38 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	96:toLVFL944jB5j+VdHPQ3vVMQxIY4Sx6B67iaLUAhivos:toLVFL94BdyvqQOU17nUAhM
TLSH	T15A510A8A2ED0D931926FD3B326AB5C176169F8AF840F600E773E43D92B1034962D2AD0
TrID	63.6% (.SH) Linux/UNIX shell script (7000/1) 36.3% (.PL) Perl script (4000/1/1)
Magika	shell
Reporter	aachum
Tags:	AmosStealer drakthos-com macOS sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

153

Origin country :

ES

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67f91af51dba888a93d08b3alinux22vpnfull_triage

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/67f91401b070fb3f94626c3a/reports/5029c796-333d-46c6-876c-414e9faf681f/overview

Nucleon Malprob Malware

Score:

71%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c83c2029bdf7ac0bd5cbb4a54c3b09ca65ef3c8e263804802fd78b41584c7595

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c83c2029bdf7ac0bd5cbb4a54c3b09ca65ef3c8e263804802fd78b41584c7595/

ReversingLabs TitaniumCloud MacOS.Trojan.Amos

Threat name:

MacOS.Trojan.Amos

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-11 13:07:15 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=za6cakn566waxvolwssuyoyjzjs66peoey4ajabp26fucwcmowkq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250411-qcqytaznt5/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Amos

Threat name:

Amos

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/c83c2029bdf7ac0bd5cbb4a54c3b09ca65ef3c8e263804802fd78b41584c7595