MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MacSync


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b
SHA3-384 hash: 7abf15310cc07a14fdf319e3bf7cfdd57a6c8dda259cb1edeeef216b222b9be99471096f32e8583efac82d4ba3c04e8d
SHA1 hash: 2b3bf40a7e255c2684a4587ef8086f430f7b2767
MD5 hash: 66459a3577da51fd5d36252be37121d2
humanhash: leopard-blue-apart-maryland
File name:c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b.sh
Download: download sample
Signature MacSync
Create hunting rule
File size:1'450 bytes
First seen:2026-04-15 11:20:32 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 24:ESatxP4jeJrzVPoENc6YdkaS9Y2Q6w/HH2nsejpoDszNo9rm3Sn:ESOQiJKJSO2QF/n2sOGIJoN0Sn
TLSH T1CD31E90355284B0AE9DA44F8FFF0405A6901B2A63F75E20E4F651004C7AE37F1D9B822
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter JAMESWT_WT
Tags:MacSync MacSync-Stealer sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
52
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Mac.Stealer.1128.14307.21908.UNOFFICIAL
Create hunting rule

Gathering data
Verdict:
Clean
File Type:
unix shell
Link:
https://opentip.kaspersky.com/c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-02-17 21:19:47 UTC
File Type:
Text (Shell)
AV detection:
3 of 24 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zgpefbjieccwlji6griyxehigxrz2fipzzzjqrvenyxwk7clbe5q._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260415-njz4ysfv6v/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/c99e428528208565a51e34518b90e835e39d150fce729846a46e2f657c4b093b

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments