🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA 3 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e
SHA3-384 hash: 4722f1259ce9e50603d5f1b9f1eda35a1d5012cb79268d2a4e1f013330bd4cbff004c0a6151ceb441c36eaf20955fe87
SHA1 hash: 8874c7052a2e675f4b6fa5d66804ea764fb32eb4
MD5 hash: a79a20c46cbda66cbc93eae7f1e9173e
humanhash: maine-table-victor-april
File name:app.zip
Download: download sample
File size:5'327'272 bytes
First seen:2026-09-15 03:54:28 UTC
Last seen:2026-09-22 20:03:09 UTC
File type: zip
MIME type:application/zip
ssdeep 98304:xSZMX8Xam2k0Tt4RPxgaTZv63PsuU+xdUOcetndr1HvRt59aC/2O7MPsEgDfMPtc:+M89zRPrx630u33UmRXHvj5kCb7mggPi
TLSH T123363361ACC689C4EC5F367C604E5419E98ECE9BD1DFCA1D8E643B1C9AC6672B1B04C3
Magika zip
Reporter whack_sh
Tags:ClickFix macOS zip

Intelligence

File Origin
# of uploads :
2
# of downloads :
457
Origin country :
US US
File Archive Information

This file archive contains 22 file(s), sorted by their relevance:

File name:HMAlphaMono-Medium-76e576e7041509dc.woff2
File size:29'312 bytes
SHA256 hash: 49b72fd41a17be525950ed0cd1b6cdd028e2e59ef339d0ec0a71eb38e9668b50
MD5 hash: e293cf6fd7316d029569f1f66a3e8304
MIME type:application/octet-stream
File name:Assets.car
File size:27'688 bytes
SHA256 hash: 9561526f38bd3a4c8d7221d62eaa2386a2671f01503a7b856d2d2941cb65a804
MD5 hash: 461d06d5d41f4acd0cf8aac99319c4c3
MIME type:application/octet-stream
File name:Inter-Regular-a2b4ebbf631de99a.woff2
File size:89'212 bytes
SHA256 hash: 77ca56870309a85759fb7116aef2119a26e358145e808868543ca1fe16c27720
MD5 hash: bffaed793493dc46bf0789e2275909ac
MIME type:application/octet-stream
File name:Inter-SemiBold-744070fd83c65a5e.woff2
File size:95'652 bytes
SHA256 hash: 65c5807ea1ddc17bf75d8e16d916b282792bb188ce9c8eb75898f0cf1cb999c0
MD5 hash: cd04cacdf531638687dd675e1d35c153
MIME type:application/octet-stream
File name:Inter-Medium-fadc0302c51b28ea.woff2
File size:95'224 bytes
SHA256 hash: 6a74b41ee40c7b4fc8dd38ac231f8a66d17d853554f7801d983057137d711b05
MD5 hash: 2e5e0884f40cc3929881d89710fa432e
MIME type:application/octet-stream
File name:Inter-Bold-17fc55ddf5a816cc.woff2
File size:95'992 bytes
SHA256 hash: d9d881c1431d22971476f4e6f219a97d7f89fbcf4e1058366510512f9d8df7c9
MD5 hash: 34356f6bf3d0f6de82656cca908803cf
MIME type:application/octet-stream
File name:ledger-live.css
File size:21'764 bytes
SHA256 hash: af597debed9953d730f86afec3353632320e3ee55885d2717d1203a08d6b3275
MD5 hash: 9ccdf594010c7117b822fd789343e28a
MIME type:text/plain
File name:Ledger Wallet
File size:261'344 bytes
SHA256 hash: c7f360875c0ebf5dfeadda5a4eaa0a42ecb298f088e35e09068b85040a44543e
MD5 hash: 751dd9a36f9be4db8af299d83df8c5ea
MIME type:application/x-mach-binary
File name:logo_light-14dcd71f272d1a91.svg
File size:1'472 bytes
SHA256 hash: 1b4de8d097bb5d3fc5c3b9a2e0b0ff774e81b7fd9deb00a450d54a19c4b0aa01
MD5 hash: d147d46f9a40e3055fa4763fc7255bec
MIME type:image/svg+xml
File name:AppIcon.png
File size:16'219 bytes
SHA256 hash: c5cd09106bba7df2f87a99ab6d830ed8da89809f1d9955423a7ebce8d79e32ba
MD5 hash: f42d1f35ad3cb66e5697a6e6729180b8
MIME type:image/png
File name:end.html
File size:11'888 bytes
SHA256 hash: cf51b817e39ee905c6d4d2675453c440ef375cbffe8cd7d773bb89a19608198a
MD5 hash: ec604e0d4a9b29a2fd2dac1aea7b4a64
MIME type:text/html
File name:external-link-2328af6add8be1bb.svg
File size:440 bytes
SHA256 hash: 3ac9cabca3655e96111904178b827e18d6b0a0c9e01bccc5d37e6401c8a734f8
MD5 hash: 872cfd47a47747b606ef72d2c7da999b
MIME type:image/svg+xml
File name:AppIcon.icns
File size:15'147 bytes
SHA256 hash: ddaabbd41abd203f838cf603f6458491e9b14ebb3e4e5d8d605bd9f2eeaab25e
MD5 hash: f0f46f91546f821404ca1b874de22bec
MIME type:image/x-icns
File name:index.html
File size:39'983 bytes
SHA256 hash: dd96aec3cbaf470ce6acc5e2d0b6a281dd726643edf8968e7f9702e69acf9458
MD5 hash: 342c9e00f1396f037e97a95d50cc7ab4
MIME type:text/html
File name:background-a8858a6e26432b63.png
File size:3'981'660 bytes
SHA256 hash: 489399a373f3cb07ffbc31a395d905830c88d3e830c192034f1c566e20523676
MD5 hash: bf806fb7f01ccc1971cba25290d3697f
MIME type:image/png
File name:Info.plist
File size:1'920 bytes
SHA256 hash: 70c0830731f80fc134506818232f546a40cd369c50808e4b1db734496de1608b
MD5 hash: db5dbdfde847d2477ec43b8fa81f18b9
MIME type:text/xml
File name:logo_dark-07bb17455404217b.svg
File size:1'477 bytes
SHA256 hash: b899f8b43d18a2ee331ac1f0ca4d1afae159ed58c1297e081bfaabccd65dc34a
MD5 hash: b74c4d00253ee605a832dca7f5a10218
MIME type:image/svg+xml
File name:PkgInfo
File size:8 bytes
SHA256 hash: 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 hash: 23b7d7d024abb0f558420e098800bf27
MIME type:text/plain
File name:CodeResources
File size:6'820 bytes
SHA256 hash: fcac00937c95a9bc9cbca8451629ab621a9694e826f64dcbfd4010df327bc757
MD5 hash: d57595807cadde743126dd1f1e5505ec
MIME type:text/xml
File name:connect-device-2af02268c3bafc3e.svg
File size:1'899 bytes
SHA256 hash: f215f9b8dd4d35866c3c8bdf7b399e5c09858a2b6b3ac68f2fdafd5721c5a9b0
MD5 hash: 9b651ea2a43cb5f613febf665bc101d2
MIME type:image/svg+xml
File name:put_seed.html
File size:95'546 bytes
SHA256 hash: 0e36257e56b419539da253936ac384956e99e5d2ec3e4e2df69dc95338f12527
MD5 hash: c84a5edd6e95ccab62d076309969d4da
MIME type:text/html
File name:home-8db3e47c9b24e921.webp
File size:783'622 bytes
SHA256 hash: a414505318109d666846d15bc67be869ea1f44f177b8ff1fd48de1c88c49da2d
MD5 hash: 7217bbe364fb5683b5688eea7a9d1185
MIME type:image/webp
Vendor Threat Intelligence
Details
Link:
https://research.acce.ciphertechsolutions.com/results/2e9c4ed8-3aa4-4569-b6a3-aa4b1c65c4fd/
Detection(s):
SecuriteInfo.com.FileRepMalware.81174377.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
89.3%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6ac0b56359bf6e2f9e92ae1f
Tags:
n/a
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e
Verdict:
Malicious
File Type:
zip
First seen:
2026-09-09T15:42:00Z UTC
Last seen:
2026-09-09T17:39:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e/results?tab=lookup
Score:
96%
Verdict:
Malware
File Type:
ARCHIVE
Link:
https://malprob.io/report/f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
SVG Zip Archive
Link:
https://app.malva.re/file/a79a20c46cbda66cbc93eae7f1e9173e
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e/
Threat name:
MacOS.Infostealer.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-09-10 02:25:04 UTC
AV detection:
7 of 24 (29.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=7dijxn7phaavgqx3rlqryse7ygr7ahtuger6iiroski4wr2pw5pa._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
macos
Link:
https://tria.ge/reports/260915-f29r4scn4t/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.45
Link:
https://yomi.yoroi.company/submissions/f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:dependsonpythonailib
Create hunting rule
Author:Tim Brown
Description:Hunts for dependencies on Python AI libraries
Rule name:html_auto_download_b64
Create hunting rule
Author:Tdawg
Description:html auto download
Rule name:Sus_CMD_Powershell_Usage
Create hunting rule
Author:XiAnzheng
Description:May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP)

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

zip f8d09bb7ef38015342fb8ae11c489fc1a3f01e743123e4222e9291cb474fb75e

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/3914532/

Comments