🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA 12 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2
SHA3-384 hash: f97b544c9045826546bf46164f2a188a31d193abb577e6b764ae907891daad0525d189f6c453214f541d463617b172e0
SHA1 hash: 0b461c532a2df39cbbf5032f24dacf4e982b9793
MD5 hash: 1c511777a20d65303f1634ff10c87105
humanhash: butter-whiskey-may-sodium
File name:calcium-.jar.github-Course23sz
Download: download sample
File size:253'103 bytes
First seen:2026-09-25 12:09:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:GvVbB771jQA9SxqKbKb/qEIUBixNvm5UO6/7JS3fvxfmBdYOfiIE2rHsCRYySFZB:AVB79BtKbaqEIU4/Bd1MYBdbvRdSdf
TLSH T124340127A16C0932DC1F9771A792E872A47C65D0B10D340B43F8989698C35DF1F96BEE
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter GhostTypes

Intelligence

File Origin
# of uploads :
1
# of downloads :
99
Origin country :
FR FR
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Java.Agent.ADG.tr.17113.19292.UNOFFICIAL
Create hunting rule

Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2
Verdict:
Malicious
File Type:
jar
First seen:
2026-09-25T10:17:00Z UTC
Last seen:
2026-09-25T10:28:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Zip Archive
Link:
https://app.malva.re/file/1c511777a20d65303f1634ff10c87105
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=dlz4lwm3jbiwvuccjucecb24gie2pxf6ilhhrp7mrfmmdapc6cra._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260925-rx7mqstzhs/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/1af3c5d99b48516ad0424d0441075c3209a7dcbe42ce78bfec8958c181e2f0a2

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:JAVA_Malware_Unknown_ForgeAuto_03a7ca91
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_0ece8eba
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_1fde0fe5
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_205e30ee
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_50b45f1d
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_5888acd8
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_61773a0a
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_8814e6c9
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_90eece6c_Extrait
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat extrait)
Rule name:MULTI_Dropper_Unknown_GitHubObfuscated_JAR
Create hunting rule
Author:Marjoriefort
Description:JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:Veille glissante 2026-09-17_22 / grappe 21 JAR
Rule name:MULTI_Malware_Unknown_ForgeAuto_6dc545a6
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (inconnu, etat binaire)
Rule name:MULTI_Malware_Unknown_ForgeAuto_b2a4008d
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (inconnu, etat binaire)

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments