MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f4ead9ede65f2c3ef5fb07428a5bdea39c228d38cbcc64bedd8a83ce64fe234. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 2

Intelligence 2 IOCs YARA 2 File information Comments

SHA256 hash:	4f4ead9ede65f2c3ef5fb07428a5bdea39c228d38cbcc64bedd8a83ce64fe234
SHA3-384 hash:	5f9559bc2b465e2159125bfc2a855406f9092806c71d06d7f231403ec59aea9b73fe39240171b5d7b298366987470dbe
SHA1 hash:	782fcf0200cd0301fd8193b212d7131d11ac15d9
MD5 hash:	aa60be03637d4408128ddccdb625889f
humanhash:	red-pennsylvania-rugby-thirteen
File name:	corzclient-1.21.11.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	40'197'966 bytes
First seen:	2026-10-04 13:49:30 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	786432:gGzvDqG3iNBihMR5VmRwq8LVWZvUBCfa00HeQ6gejFbsq:zH3286PmRwq8LVWBUB0a1HetT
TLSH	T14F97338A695CC13AFC0B42365004DA3B3D552E8C8127B60ABD75E9CD8D75F428B49FAF
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

128

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

jar

Verdict:

No threats detected

Analysis date:

2026-10-04 13:58:11 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/52406fde-d6ca-4d59-8b58-f194d0f5f5e8

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/4f4ead9ede65f2c3ef5fb07428a5bdea39c228d38cbcc64bedd8a83ce64fe234

Verdict:

Unknown

File Type:

jar

First seen:

2026-10-04T11:31:00Z UTC

Last seen:

2026-10-05T10:20:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4f4ead9ede65f2c3ef5fb07428a5bdea39c228d38cbcc64bedd8a83ce64fe234/results?tab=lookup

Score:

Verdict:

Benign

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/261004-q5eq9azcna/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/4f4ead9ede65f2c3ef5fb07428a5bdea39c228d38cbcc64bedd8a83ce64fe234

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	Sus_CMD_Powershell_Usage Create hunting rule
Author:	XiAnzheng
Description:	May Contain(Obfuscated or no) Powershell or CMD Command that can be abused by threat actor(can create FP)