MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c
SHA3-384 hash:	9cc078ee7f37bab31ee06efb390f36e2251634b2affd4d17335c174739860418b6749bff072be2013a856c4f8800ee64
SHA1 hash:	edfdd6320688be1454919437a86027484942f505
MD5 hash:	69e8724e8bf937c4387bf602ec894e84
humanhash:	butter-ceiling-nebraska-stairway
File name:	tankdupe-1.10.0+1.21.1.jar
Download:	download sample
Signature	SilentNet Alert Create hunting rule
File size:	110'202 bytes
First seen:	2026-09-17 21:15:47 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	3072:cjgp9aqscZoIpZFSA3OJODuVi9gheikNB7kAOg:mpqscpxK/zG1f
TLSH	T1ADB3121135CA281CC87B35F508532DA83D685B31CB12782D97D76012BFEAFA7BBE9095
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	zip
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

103

Origin country :

IN

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

tankdupe-1.10.0+1.21.1.jar

Verdict:

Malicious activity

Analysis date:

2026-09-17 20:17:25 UTC

Tags:

silentnet stealer python evasion openssl tool

Link:

https://app.any.run/tasks/b4acbf5b-c07e-4e3c-837e-144d9f4002f8

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/86337/

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6aac58a0cf451ab4a9de84c2/reports/97fcb1a9-f613-4c2c-b91f-030a6993085d/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-17T20:39:00Z UTC

Last seen:

2026-09-17T22:50:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jkrwagn4glmnwmkjzmwg6gn6opqj7cmbv2o6woesqbelsmldfzga._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260917-z4k2ba1x9p/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

jar 4aa36019bc32d8db3149cb2c6f19be73e09f8981ae9deb38928048b931632e4c

(this sample)

any.run

https://app.any.run/tasks/b4acbf5b-c07e-4e3c-837e-144d9f4002f8

  

Dropping

SilentNet

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/86337/