MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa
SHA3-384 hash:	ee59146357bfcd34a307192e2d8cfeb1f1f3d75bcc076e7811480d35013c40dcc1f7f828615a0df4e808371d6f4d531e
SHA1 hash:	68e9669afb76870597344d49c38d40df1b41b649
MD5 hash:	df1e6dfdafbf89b0e0eb608993813e10
humanhash:	music-eighteen-magnesium-finch
File name:	xGrok.dmg
Download:	download sample
File size:	1'068'164 bytes
First seen:	2026-09-18 20:27:55 UTC
Last seen:	Never
File type:
MIME type:	application/zlib
ssdeep	24576:lzZnKj+RGOj82XooTbxxyhrvGiHxzbrJ8c:lzxDj5HTQr7/r
TLSH	T11635337E7C812D02DDE17EF80526DD78AC5E7D734F35019B7438CE991AEE881A522E82
TrID	97.6% (.DMG) Macintosh Disk image (BZlib compressed) (83000/1/20) 2.3% (.) ZLIB compressed data (best comp.) (2000/1)
Magika	dmg
Reporter	smica83
Tags:	dmg

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

52

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6aad9ee034f16262c7e38b47/reports/bdc3eb02-be2f-4c13-a525-50a054a7dac0/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

udif

First seen:

2026-09-03T18:46:00Z UTC

Last seen:

2026-09-03T18:56:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa/

ReversingLabs TitaniumCloud MacOS.Trojan.Generic

Threat name:

MacOS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-04 05:16:53 UTC

File Type:

Binary (Archive)

Extracted files:

11

AV detection:

9 of 36 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zq5ddtksxphlwku35um4o2etiu226dwm57ipqh4nmylotxixmh5a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/cc3a31cd52bbcebb2a9bed19c768934535af0eccefd0f81f8d6616e9dd1761fa