MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000
SHA3-384 hash:	bc51d0ba4971a75ca77f5b6669d5a3d8a5a1319ade87374b2e85598e5f4e8ade61b43c0e33a8a3f8646b30eaf5ba51f3
SHA1 hash:	712da8d933ac5f21b144b6e0f38222d7f27efc28
MD5 hash:	1f1761e891f48fb2719e6e3bbcb95f51
humanhash:	avocado-one-fix-seventeen
File name:	larp-addon-1.21.11.jar
Download:	download sample
Signature	SilentNet Alert Create hunting rule
File size:	1'263'819 bytes
First seen:	2026-10-08 17:57:19 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	24576:2vnu7Nu7fgrh6/MxBTksLke8yOJx+MRvNr1r5h5+qWWPWcmFkJQ8kx3IP:2vnuYK6UxBQsAesn1SBWPWYFkx4
TLSH	T1D4452322D276112CDC2743FDBD9C8569A57422A2C10AA91CA9FC57E51C1389B3F4B3DF
TrID	57.8% (.JAR) Minecraft Fabric Mod (24020/2/4) 32.5% (.JAR) Java Archive (13500/1/2) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

76

Origin country :

AT

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

larp-addon-1.21.11.jar

Verdict:

Malicious activity

Analysis date:

2026-10-08 16:56:06 UTC

Tags:

silentnet stealer etherhiding evasion arch-exec arch-doc python auto generic openssl tool arch-scr

Link:

https://app.any.run/tasks/6e18cb7d-b7a9-4382-93f8-3cab53f54ed0

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/91139/

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6ac7d9b54a6b1a7cdbe4d2ae/reports/56833035-56ca-406a-84ca-f5474728c774/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

jar

First seen:

2026-10-08T13:49:00Z UTC

Last seen:

2026-10-10T06:36:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bhiz74zwofe3l6ungg6pmmln6r4idnxpdc6cc3lp7xrphtw6kaaa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

discovery

Link:

https://tria.ge/reports/261008-wj81vs1wbz/

Behaviour

Network Service Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

jar 09d19ff3367149b5fa8d31bcf6316df47881b6ef18bc216d6ffde2f3cede5000

(this sample)

any.run

https://app.any.run/tasks/6e18cb7d-b7a9-4382-93f8-3cab53f54ed0

  

Dropping

SilentNet

  

Delivery method

Distributed via web download

  

URLhaus

https://urlhaus.abuse.ch/url/3946317/

Cape

https://www.capesandbox.com/analysis/91139/