MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7
SHA3-384 hash:	a818d9bc3f6ca905d1c473c8769f9c8f8473b6d6181bc510b2c419bf2a97b6130c8eff8221a01c1af24f4b8fe8a93120
SHA1 hash:	bb5e8dcdbd12d2348679143dbe970fada00f6d03
MD5 hash:	409b09da0ffe302fedc6176bedf80243
humanhash:	seven-oxygen-asparagus-ten
File name:	dulkir-mod.com--DulkirMod-Fabric-26.2.jar.jar
Download:	download sample
File size:	1'577'579 bytes
First seen:	2026-09-16 03:08:49 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	24576:iyvk0zjGYDcGQRomFn8Eaq50W6ZdtrR8yjocZnDAYHmXDGedtuRoDz5P9H3nL+kl:igyY4GQRo4nP+JRfjoscYGXrdcOVN3l1
TLSH	T1F4753343956CB813FCB35274478DB2FACAC5701A0D8456BB1EBA56218D5FEC40E389BA
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	GhostTypes

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

55

Origin country :

FR

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN

Malware family:

n/a

ID:

1

File name:

jar

Verdict:

No threats detected

Analysis date:

2026-09-16 04:00:16 UTC

Tags:

arch-exec

Link:

https://app.any.run/tasks/add80e03-883a-42bc-b811-61687b959e98

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/85757/

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ig7ouwzotdi6x6gtxdmmit4i4ifq7q7a5bv5u5m4shcxl2ywlxdq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260916-dnqqzay13q/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

jar 41beea5b2e98d1ebf8d3b8d8c44f88e20b0fc3e0e86bda759c91c575eb165dc7

(this sample)

Cape

https://www.capesandbox.com/analysis/85757/

  

URLhaus

https://urlhaus.abuse.ch/url/3917212/

  

Delivery method

Distributed via web download