MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032
SHA3-384 hash:	37d32849ba67cb6fba8944540b0edbcd5eff912c99a04b5d721a9167a214870a1d74f36f54254376039c9aa71e14b74d
SHA1 hash:	83bf158dac103ae9271c18accbfaa6b09a3ec90f
MD5 hash:	7d31da1f0b4edcacd1d466b5bf95ade3
humanhash:	undress-network-blossom-bacon
File name:	ChatGPT_1.2026.118.dmg
Download:	download sample
File size:	647'080 bytes
First seen:	2026-09-18 19:51:37 UTC
Last seen:	Never
File type:
MIME type:	application/zlib
ssdeep	6144:YMbL3lGUavd2yIgEx4iZRgRwaMtTI66Mev58BncPndHgzPaRh9NBK:YMvjaV2UExdZ1aeT2V5kRzyRh
TLSH	T18AD48C37AE696D84DF951FFF8131D5628CD8E9C3A1A6C4E4BC4009417EE8BD4F8642A3
Magika	dmg
Reporter	smica83
Tags:	dmg MioLab

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

59

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.MacOS.Agent-BOK.86313663.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

Hybrid Analysis MacOS/Agent5.GO

Verdict:

Malicious

Labled as:

MacOS/Agent5.GO

Link:

https://www.hybrid-analysis.com/sample/fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

udif

First seen:

2026-09-16T08:26:00Z UTC

Last seen:

2026-09-19T22:35:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032/

ReversingLabs TitaniumCloud MacOS.Trojan.Multiverze

Threat name:

MacOS.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-09-18 00:22:17 UTC

File Type:

Binary (Archive)

Extracted files:

9

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=7ylb3sbh2begipwlipz2zwqsxakbhjceqd7srj4k4dui5ab6saza._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/fe161dc827d048643ecb43f3acda12b81413a44480ff28a78ae0e88e803e9032