MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33
SHA3-384 hash:	61ebbb2a89e02f4cec77234711caea9ba8af2c2a97624298de863c278071370cfdd797c8d19b8de76720c9039a04deba
SHA1 hash:	da82bb9dc36b59ac0017d700e2c1315604fac487
MD5 hash:	43bc15f38017e3427d7972a8ee2702a0
humanhash:	three-solar-oven-orange
File name:	ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33
Download:	download sample
File size:	245'568 bytes
First seen:	2026-01-04 16:09:53 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	6144:Ls+hidtESQGCpsRDaSm3b+xO4ZUeSXRMoHLKW6RNGAcG7ZZ6t9bgX8JVRl:xYxBaYnCRMoHLKW6RNGAcG7ZZ6t9bgXu
TLSH	T196344C536706282CC26B51321ABBF7714370F4517791377AA79482325EBAEA01F62F8F
Magika	macho
Reporter	l0psec
Tags:	machO PDFConverter SWIFT

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

52

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=695a90ede148d42004df518d

Tags:

adagent virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

bashlite gafgyt mirai

Link:

https://www.filescan.io/uploads/695a90e98d1aa9829e2a2c31/reports/94bdc1ed-cd2f-4543-93a2-1b613dddef5a/overview

Hybrid Analysis Mac/malicious_confidence_100%

Verdict:

Malicious

Labled as:

Mac/malicious_confidence_100%

Link:

https://www.hybrid-analysis.com/sample/ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

macho x64 le

First seen:

2025-11-12T19:46:00Z UTC

Last seen:

2026-01-04T15:49:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.OSX.Agent.gen

Link:

https://opentip.kaspersky.com/ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

Mach-O

Link:

https://malprob.io/report/ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33/

Neiki Trojan-Downloader.OSX.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.OSX.Agent

Link:

https://tip.neiki.dev/file/ecc15c35c1f6e04c049023a664b23a3369dfeddb155408601f660c295b6bfa33

ReversingLabs TitaniumCloud MacOS.Adware.AdAgent

Threat name:

MacOS.Adware.AdAgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-19 20:32:59 UTC

File Type:

MachO64 Little (Exe)

AV detection:

8 of 36 (22.22%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5tavynob63qeybeqeotgjmr2gnu573o3cvkaqya7mygcsw3l7izq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.