MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5
SHA3-384 hash:	a2147edf59dd369a44686caf8c47339acfaf1772e0d4e2fb45c81b4b90f8f0916337a49b58b475b97ade80d1398167fc
SHA1 hash:	ede149b381d9fe760ee367752e98b8c29cfc4a92
MD5 hash:	ac0be3d80f900f4dc6ad088b23eb24ff
humanhash:	uniform-ten-carolina-indigo
File name:	dqrkisclient-1.21.11.jar
Download:	download sample
Signature	SilentNet Alert Create hunting rule
File size:	2'168'470 bytes
First seen:	2026-10-10 09:30:26 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	49152:AHmgwwKB3CQoFSMEszFq+9ytdwRLjoF2EOCQijgssn803HR1N:AHfLKB3oFREkN9ytdmjshgs6
TLSH	T1CFA5C0157F4FD479F103D23651426B26A83CC598DA05E1AB3FE05C898C70CEF5B8AADA
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

118

Origin country :

AT

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

jar

Verdict:

Malicious activity

Analysis date:

2026-10-10 09:39:13 UTC

Tags:

silentnet stealer etherhiding evasion

Link:

https://app.any.run/tasks/7430772a-0721-4e1c-963c-4d20175c0d65

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/91342/

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.GenericKD.81707016.13571.16214.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad0ab75f4e17c78f715afc3

Tags:

malware

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

jar

First seen:

2026-10-06T13:35:00Z UTC

Last seen:

2026-10-11T23:15:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5/results?tab=lookup

Nucleon Malprob Benign

Score:

1%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5/

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-10-05 22:06:49 UTC

File Type:

Binary (Archive)

Extracted files:

2152

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=n7fp33xauyut436wev54jnogrkbkwhg5m3t4ndqgikxct6mjoksq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/261010-lg8bfabt4k/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

jar 6fcafdeee0a6293e6fd6257bc4b5c68a82ab1cdd66e7c68e0642ae29f98972a5

(this sample)

  

Dropping

SilentNet

  

Delivery method

Distributed via web download

  

URLhaus

https://urlhaus.abuse.ch/url/3943870/

Cape

https://www.capesandbox.com/analysis/91342/