MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786
SHA3-384 hash: c1778cfbf5e106fae9b875582249ede5122e7324982df37af1ea69976b1a0053740968372b290cc028a3a5b57e0ec5fb
SHA1 hash: f994a9294e077678584152507df9d42c7ceb01f0
MD5 hash: 7e6adad1fd8d07dcdb80a344b0f0dbb3
humanhash: may-yankee-floor-beer
File name:Voxa.dmg
Download: download sample
File size:5'055'962 bytes
First seen:2025-11-06 19:43:28 UTC
Last seen:Never
File type:
MIME type:application/zlib
ssdeep 98304:Lro+IxMm44iUXEb7DBTV3vlIM4/RTgMTDLIim/aW/GrNAonChwJQFBj4:Lkt44fEb7DB5/mT+R/3aAz
TLSH T13B3633BDD82FFDEFB909E1EAB0B950446EED96C3091246BF0D74D466016F7C0ADA8811
TrID 97.6% (.DMG) Macintosh Disk image (BZlib compressed) (83000/1/20)
2.3% (.) ZLIB compressed data (low/no comp.) (2000/1)
Magika dmg
Reporter smica83
Tags:dmg

Intelligence

File Origin
# of uploads :
1
# of downloads :
40
Origin country :
HU HU
Vendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=690cfa91ea0f3e915c23c154
Tags:
n/a
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/690cfa8d811c0c37f1093f7d/reports/c2fb4ce2-29be-41bf-9a86-83b6ab667519/overview
Verdict:
Suspicious
Labled as:
OSX/AVI.Stealer
Link:
https://www.hybrid-analysis.com/sample/e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786
Verdict:
Malicious
File Type:
udif
First seen:
2025-11-06T07:35:00Z UTC
Last seen:
2025-11-06T17:19:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-PSW.OSX.HashBreaker.e
Link:
https://opentip.kaspersky.com/e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786/results?tab=lookup
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786/
Verdict:
Malicious
Threat:
Trojan-PSW.OSX.HashBreaker
Link:
https://tip.neiki.dev/file/e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786
Threat name:
MacOS.Trojan.Multiverze
Create hunting rule
Status:
Malicious
First seen:
2025-11-06 13:17:01 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
10 of 38 (26.32%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=4kkc3gzoi5uenmk4ldagobr52w2qxsdb4zloubarqizxordro6da._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.05
Link:
https://yomi.yoroi.company/submissions/e2942d9b2e476846b15c58c067063dd5b50bc861e656ea041182337744717786

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments