🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 16fe74fd70cd6dc18a44654f71bcdbbf4a5402fb05a8fcdcd62fbfcc9ae880e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



SilentNet


Vendor detections: 3


Intelligence 3 IOCs YARA 1 File information Comments

SHA256 hash: 16fe74fd70cd6dc18a44654f71bcdbbf4a5402fb05a8fcdcd62fbfcc9ae880e7
SHA3-384 hash: 310ac63d2995cc1691e980d0e103204479b3c1c54b6b52a4819d0f029f003397129754472b49a647d231e6b6e34aa11b
SHA1 hash: df4f7ee34de06f7f805ba4a3517243f18ee209fa
MD5 hash: c1eafc0d8c856755d5c328029ada9ae3
humanhash: kentucky-fourteen-jig-november
File name:radiumclient.jar
Download: download sample
Signature SilentNet
File size:1'324'857 bytes
First seen:2026-09-17 19:38:38 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 24576:GxPluApXtpRaCxuuVfR4F28aoCbANYoae0KCNRyYBGjcMtvuMzNRO:GVluApXtpRj/fRwrATB1NRyYBwdtlJg
TLSH T17755331362ED7E5889DB7C3D5A548BDE49AD46BBDC805E4C58F82009F2B31D3AD58CD0
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter wok
Tags:jar java Python SilentNet

Intelligence


File Origin
# of uploads :
1
# of downloads :
80
Origin country :
IN IN
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
radiumclient.jar
Verdict:
Malicious activity
Analysis date:
2026-09-17 18:28:40 UTC
Tags:
silentnet stealer python openssl tool

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures


MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:MULTI_PUA_FabricMod_PackageIcon_LicenseGithub
Author:Marjoriefort
Description:Mod Minecraft Fabric (structure package + LICENSE_github) soumis en masse - PUA/mods, pattern de soumission
Reference:misses_archive / grappe 9 archives

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar 16fe74fd70cd6dc18a44654f71bcdbbf4a5402fb05a8fcdcd62fbfcc9ae880e7

(this sample)

  
Dropping
SIlentNet
  
Delivery method
Distributed via web download

Comments