MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 766227754dc2f9d155dba5bee989d9716fe7d899b5be11d81e1739761f7be8a6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 7

Intelligence 7 IOCs YARA 1 File information Comments

SHA256 hash:	766227754dc2f9d155dba5bee989d9716fe7d899b5be11d81e1739761f7be8a6
SHA3-384 hash:	56886f5895ae56c5e99d183bd730d855556003e794ba731fb174abce96a1ae5dce87dcb41e6aa5d0ab48fcfc067a6343
SHA1 hash:	6fbd5e1e277d44292c04b9395a625cf22f272efe
MD5 hash:	df9ba5d6f92c1db725929a9a482d2d46
humanhash:	triple-high-asparagus-juliet
File name:	Krypton client cracked.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	5'673'910 bytes
First seen:	2026-09-26 21:03:33 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	98304:iNEQVcuTItdcSQGWc8IQYrc16j5E0iG3VuY3YDQsgooEiFvA34BVZ:PuTE2SQ/+QR16j5E0blunmNaoBT
TLSH	T1CB462374C37D69B9D5CF6930CB470A4B338712CE49C13D5BAE711929BA0A2B0B7B1B94
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

143

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

Krypton client cracked.jar

Verdict:

Malicious activity

Analysis date:

2026-09-26 20:48:45 UTC

Tags:

silentnet stealer python evasion arch-exec auto generic openssl tool

Link:

https://app.any.run/tasks/aaa286d7-a6a0-4ac4-b085-74dd958e03d5

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/89194/

Detection(s):

SecuriteInfo.com.Java.Agent.ADG.tr.10232.24309.UNOFFICIAL

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ac0b47d59bf6e2f9e92a491

Tags:

shellcode trojan virus java

Verdict:

Unknown

Threat level:

2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6ab8335335cd492da8f0fa36/reports/28c21656-c748-4bcd-ae12-2f082ef950c5/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/766227754dc2f9d155dba5bee989d9716fe7d899b5be11d81e1739761f7be8a6

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-26T20:23:00Z UTC

Last seen:

2026-09-27T18:11:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/766227754dc2f9d155dba5bee989d9716fe7d899b5be11d81e1739761f7be8a6/results?tab=lookup

Score:

52%

Verdict:

Susipicious

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/260926-zwn31atwgs/

Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	MULTI_Dropper_Unknown_GitHubObfuscated_JAR Create hunting rule
Author:	Marjoriefort
Description:	JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:	Veille glissante 2026-09-17_22 / grappe 21 JAR