Resubmissions

13/09/2026, 12:26

260913-pmpm3ayxcs

13/09/2026, 12:24

260913-pk183sgl7110

13/09/2026, 12:22

260913-pj95laxaje10

13/09/2026, 12:22

260913-pj4b2swhrh10

13/09/2026, 12:21

260913-pjs63sbb3910

11/08/2025, 20:38

250811-zevjfst1gy7

11/08/2025, 20:37

250811-zemhvasjx81

General

  • Target
    8d8b40e87d3011de5b33103df2ed4ec81458b2a2f8807fbb7ffdbc351c7c7b5e
  • Size 800KB
  • Sample260913-pjs63sbb39
  • SHA256 8d8b40e87d3011de5b33103df2ed4ec81458b2a2f8807fbb7ffdbc351c7c7b5e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Shamos

    Shamos is a variant of AmosStealer, a MacOS stealer developed by the COOKIE SPIDER cybercriminal group.

  • Detects Shamos stealer universal Mach-O binary 1 IoCs

File Explorer

  • 8d8b40e87d3011de5b33103df2ed4ec81458b2a2f8807fbb7ffdbc351c7c7b5e
    .dmg 800KB
  • Installer/.DS_Store
    10KB
  • Installer/.Installer
    .macho 1.6MB
  • Installer/.VolumeIcon.icns
    37KB
  • Installer/.background/qajhnZ8.png
    .png 14KB
  • Installer/Installer.wux
    .sh 2KB
  • Installer/Installer.wux:rsrc
    112KB
  • Installer/Terminal
    864B

8d8b40e87d3011de5b33103df2ed4ec81458b2a2f8807fbb7ffdbc351c7c7b5e

  • SHA256 8d8b40e87d3011de5b33103df2ed4ec81458b2a2f8807fbb7ffdbc351c7c7b5e
  • MD5 SHA1 SHA512 SSDEEP TLSH