MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 592427a6efcc47f72313058aecb599f2eb2d5009866901d24ea36a4ebe560f62. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



WeedHack


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 592427a6efcc47f72313058aecb599f2eb2d5009866901d24ea36a4ebe560f62
SHA3-384 hash: 45fbc71e220bbf5346da87896c1720bb54820d9034d9343c11d0e2b28c0b283f24471e84123b4cc289aa33e88bbd82c1
SHA1 hash: d0e4f6b613f2ce58dd6066ddc7c154a2a8259c35
MD5 hash: 64f3d55a8fb857081e149c5ff5adcf1e
humanhash: kansas-mississippi-oklahoma-four
File name:KryptonWindows-x86-1.21.11 (1).jar
Download: download sample
Signature WeedHack
File size:807'345 bytes
First seen:2026-05-15 09:46:36 UTC
Last seen:Never
File type:Java file jar
MIME type:application/java-archive
ssdeep 12288:KS4foQI5Y72ehLmEA7DKRcpzQB52IMLIckjvIumdAafp82ySMnZPH:GIm8lxQILjkglh8cMnZPH
TLSH T11105A739F985846DEC4782B40054836774388C8FA6C9F13F5AAFAC091DB7BAE0769DC5
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar WeedHack

Intelligence


File Origin
# of uploads :
1
# of downloads :
65
Origin country :
US US
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
KryptonWindows-x86-1.21.111.jar
Verdict:
Malicious activity
Analysis date:
2026-05-15 09:46:33 UTC
Tags:
stealer weedhack etherhiding

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1913930 Sample: KryptonWindows-x86-1.21.11 ... Startdate: 15/05/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Gathering data
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments