🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 144da0aeaea5caf8b2ea86d0158fa7c43326d88b98654c32afd6d68f5e1a8cad. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



SilentNet


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments

SHA256 hash: 144da0aeaea5caf8b2ea86d0158fa7c43326d88b98654c32afd6d68f5e1a8cad
SHA3-384 hash: 4f4c5ffcd2641e5139e37d8fc30c5f766efa2b20b98fa7298a3d508e80c99c7481270e14fce60239d40ff62411ea3018
SHA1 hash: fa5c3a38d9a48b24fd6c9743b72d625f0d31c8d0
MD5 hash: 918e3efcd3d150cb76c212cf723d93bd
humanhash: jupiter-winter-sierra-finch
File name:1trouser-streak-1.6.1-26.1.2.jar
Download: download sample
Signature SilentNet
File size:917'291 bytes
First seen:2026-09-15 00:33:24 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 24576:cA09OPpo1AQM4nfsOlMcLODgdiiOMDJLIoPniy:41AOnUQxSI
TLSH T196150241BF2B9527C12FA37C786A4921EEE890DCA92D218504FBD368CDD2CAD11B5F5C
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter GhostTypes
Tags:EtherHiding jar SilentNet stealer


Avatar
GhostTypes
Minecraft mod/client malware detected by static analysis. smart-contract dead-drop (EtherHiding): contract 0x9c0a507300fd902787bb193d80fca5ce6e1bff9a, selector 0xce6d41de, currently resolves to thisisafalsepositive.st.

Intelligence


File Origin
# of uploads :
1
# of downloads :
97
Origin country :
US US
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
jar
Verdict:
Malicious activity
Analysis date:
2026-09-15 00:48:14 UTC
Tags:
silentnet stealer arch-exec arch-doc python auto generic evasion openssl tool

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
anti-debug obfuscated
Verdict:
Malicious
File Type:
jar
First seen:
2026-09-14T22:26:00Z UTC
Last seen:
2026-09-16T18:04:00Z UTC
Hits:
~10
Threat name:
ByteCode-JAVA.Trojan.Ravartar
Status:
Malicious
First seen:
2026-09-15 00:34:41 UTC
File Type:
Binary (Archive)
Extracted files:
208
AV detection:
6 of 24 (25.00%)
Threat level:
  5/5
Result
Malware family:
silentnet
Score:
  10/10
Tags:
family:silentnet stealer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar 144da0aeaea5caf8b2ea86d0158fa7c43326d88b98654c32afd6d68f5e1a8cad

(this sample)

  
Delivery method
Distributed via web download

Comments