MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 342841fe8f50a45abac8c2dbd246d842f65705212b1936baadbbce9b3f0aaa24. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 7

Intelligence 7 IOCs YARA 3 File information Comments

SHA256 hash:	342841fe8f50a45abac8c2dbd246d842f65705212b1936baadbbce9b3f0aaa24
SHA3-384 hash:	47f635d5f7d2bf31a67a83338f1f167d6587410f3a7bff640d2d8681cdddfe735a7b0bbd04a8e2df9123f6f048bb1335
SHA1 hash:	52ae89f79113b8eba3e95cdbef816431ef546006
MD5 hash:	fad9cbe853b269468cea5986288ae3ae
humanhash:	mango-ink-eight-wisconsin
File name:	CorzClient - 1.21.11 - fabric.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	6'044'326 bytes
First seen:	2026-10-05 14:46:35 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	98304:sKc5mNtJPM00THoXH8kqS2SKrs1Hw40qkdL0GEgGf3Uw18PpKl0:svgNHbondS2mHw5qkJ0lgM3Nehl
TLSH	T1F5560221DA1E0039F833FB339042B9E178FBEF95520BF06A3A79154D4859A838F7E556
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

130

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

CorzClient - 1.21.11 - fabric.jar

Verdict:

Malicious activity

Analysis date:

2026-10-05 14:41:05 UTC

Tags:

silentnet stealer etherhiding evasion python arch-exec auto generic openssl tool

Link:

https://app.any.run/tasks/1b933d53-7015-4841-abea-0a533d60496c

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/90730/

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6acf7e516f551121ba1537dd

Tags:

shellcode

Verdict:

Suspicious

Threat level:

5/10

Confidence:

100%

Tags:

anti-debug explorer lolbin obfuscated

Link:

https://www.filescan.io/uploads/6ac3b870a0bd735d1bb56eb6/reports/e5e91f7b-2c3b-4db1-96c1-1fb569350a7d/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/342841fe8f50a45abac8c2dbd246d842f65705212b1936baadbbce9b3f0aaa24

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-28T21:46:00Z UTC

Last seen:

2026-10-06T00:43:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/342841fe8f50a45abac8c2dbd246d842f65705212b1936baadbbce9b3f0aaa24/results?tab=lookup

Score:

13%

Verdict:

Benign

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/261005-r5ypssvgqd/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/342841fe8f50a45abac8c2dbd246d842f65705212b1936baadbbce9b3f0aaa24

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	CP_Script_Inject_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	Detects attempts to inject code into another process across PE, ELF, Mach-O binaries

Rule name:	dependsonpythonailib Create hunting rule
Author:	Tim Brown
Description:	Hunts for dependencies on Python AI libraries

Rule name:	MULTI_Dropper_Unknown_GitHubObfuscated_JAR Create hunting rule
Author:	Marjoriefort
Description:	JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:	Veille glissante 2026-09-17_22 / grappe 21 JAR