MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5aaf701b3827bf15180e02bdcaab94d8d71e380b2a76db398166c9c7c80f0145. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



MythStealer


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 5aaf701b3827bf15180e02bdcaab94d8d71e380b2a76db398166c9c7c80f0145
SHA3-384 hash: edc0f0939646a63ba0edeba623affc5c8fee30da2f7517453a39bf0973eb75d501d0c516f025e10b5673588154d06fca
SHA1 hash: fb135e0e7b0583a1b17450bb157ca4d4a58c8625
MD5 hash: 5ef30422fa830047dd26a545b87e1b0c
humanhash: comet-mars-fillet-jig
File name:client.jar
Download: download sample
Signature MythStealer
File size:18'524'762 bytes
First seen:2026-02-20 18:44:34 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 393216:+jod9DlXM5zfQ5xxOaxQn5f0Ed3Udqx8mbdvwgMKdgMWw:lTDt8zfS/5Q5sEdgqx8OjzdLH
TLSH T175172313D5AFC834CA3B88B361C70345A9232165DD0BD27F13F469958F62A5B0BB1B7A
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar MythStealer stealer

Intelligence


File Origin
# of uploads :
1
# of downloads :
191
Origin country :
NL NL
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
https://gofile.io/d/dqmklp
Verdict:
Malicious activity
Analysis date:
2026-02-20 18:33:12 UTC
Tags:
fileshare anti-evasion stealer crypto-regex ims-api generic antivm

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Malicious
File Type:
jar
Detections:
UDS:DangerousObject.Multi.Generic
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1872672 Sample: client.jar Startdate: 20/02/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

b5924dba73d78ab6cfbe2f4d29fb74455f9ee9c7e79a25b41d9a2e628bd09ec7

MythStealer

Java file jar 5aaf701b3827bf15180e02bdcaab94d8d71e380b2a76db398166c9c7c80f0145

(this sample)

  
Dropped by
SHA256 b5924dba73d78ab6cfbe2f4d29fb74455f9ee9c7e79a25b41d9a2e628bd09ec7

Comments