MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a
SHA3-384 hash:	8fc8504c3bac065b96be78e6341249cb6b145d40df406da2e1cb16d65f8171443585331a2c854d34bbc6f5ce1f9cfb3d
SHA1 hash:	aff08293394908de21681be423ef39beafd214d0
MD5 hash:	6eb6791b5bb8fceca58616187723607f
humanhash:	music-earth-solar-mountain
File name:	update
Download:	download sample
Signature	AmosStealer Alert Create hunting rule
File size:	252'928 bytes
First seen:	2025-02-21 14:04:25 UTC
Last seen:	Never
File type:	macho
MIME type:	application/x-mach-binary
ssdeep	1536:eXc9dpD80VJxDWHEwNIlOEDzn1zo65TRkcmJxDWHEwNIlOEDzn1So:Qc9bD80rllOEDpzoeV2llOEDpSo
TLSH	T1C934A5B26F05EC41F9A69D3CF275B1741320352AB2BB2A4D0616E6641DFDB60DE1CCCA
TrID	82.2% (.DYLIB) Mac OS X Mach-O universal Dynamically linked shared Library (32500/1/5) 17.7% (.O/DYLIB/BUNDLE) Mac OS X Universal Binary (generic) (7002/2)
Magika	macho
Reporter	skocherhan
Tags:	AmosStealer machO

skocherhan

https://applepistudios.com/ce/update

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

98

Origin country :

GB

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Mac.PWS.Amos.125.21079.32116.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67b8881a28ab76d43a5c4ec6

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67b8881fea4978452df2a741/reports/97da1468-517e-4955-ab64-ac8e05ec6a81/overview

Hybrid Analysis OSX/PSW.Agent

Verdict:

Malicious

Labled as:

OSX/PSW.Agent

Link:

https://www.hybrid-analysis.com/sample/ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

Mach-O universal binary

Link:

https://malprob.io/report/ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a/

ReversingLabs TitaniumCloud MacOS.Trojan.Amos

Threat name:

MacOS.Trojan.Amos

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-21 14:05:19 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

9 of 38 (23.68%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5y3iitmee2sid26loqqeayyxo5mnys7bq7sn6xax4at7em7manva._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ee36844d8426a481ebcb74204063177758dc4be187e4df5c17e027f233ec036a