🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA 5 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1
SHA3-384 hash: c1446bc7033602d74855fe128626e6a02f924b2e54e9ed317bbe143616590a551ca6239581e0135cccc46490a9452b05
SHA1 hash: f906fe39cfbad59d6482f50508a84d4bb41712ef
MD5 hash: 73f13d52327a956990297b38c39f6aa6
humanhash: queen-mexico-orange-bakerloo
File name:7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1.bin
Download: download sample
File size:1'584'660 bytes
First seen:2026-09-30 12:52:45 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 49152:wc6GYW4DEsJRuLXNH0AkMsrldmYL/3IWi3:WGYKsJRuLXNH0AtsPm0Al3
TLSH T17F753313996CB813FCB34274878DB2ED89C4701A0DC59A7B5EB546218D4FE984F2C9BE
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika zip
Reporter whack_sh
Tags:zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
93
Origin country :
US US
File Archive Information

This file archive contains 19 file(s), sorted by their relevance:

File name:HudMixin.class
File size:12'162 bytes
SHA256 hash: d0edb9a27e794f808d056abac5f64841e0e008138d73d2b11fe85a46be303046
MD5 hash: b8913232e673cbe13297a382141166f2
MIME type:application/x-java-applet
File name:ModMenuIntegration.class
File size:1'303 bytes
SHA256 hash: 7ed0e677a0e0d45fa45a0c0eada8140467c42cce024047b8372d4a4437c86304
MD5 hash: 7c9f2d7f0ae9a03f4accbbbd8b7b1db5
MIME type:application/x-java-applet
File name:MANIFEST.MF
File size:346 bytes
SHA256 hash: fef16c0a8c2facf4c28871bdcc1e1a87bddbfbdb8c73bc47f285c308db7c36ad
MD5 hash: ce800052a7e57f05484b10d35efe3438
MIME type:text/plain
File name:Anchor$2.class
File size:846 bytes
SHA256 hash: 6bc3aa80786265158d45d960cac15f52d3febb03223771046f4f87b8575ad5a4
MD5 hash: d809cb89c6574158e9b2c39e91fb78b1
MIME type:application/x-java-applet
File name:VisualsType.class
File size:1'273 bytes
SHA256 hash: 459ab0bbc107e3f3dc8b487854478d40d2b8a98313e6aa58b22a2cba0efdba64
MD5 hash: 6013dc3c953f8d04fe7287948a9259a6
MIME type:application/x-java-applet
File name:en_us.json
File size:3'611 bytes
SHA256 hash: 4c77bd4d2eac48c99cdc8721732f92d80139c2a52f7c66c9746a4ee79e2ae913
MD5 hash: 31f8c01836179839d8b310edce8faae9
MIME type:application/json
File name:SprintConfig.class
File size:3'444 bytes
SHA256 hash: 79ba4bee16a15605c5104137e29646d19f766b328ddc74506e0b718aee594cc9
MD5 hash: 712e1d2eed08c3704394e538240f52bd
MIME type:application/x-java-applet
File name:Anchor$1.class
File size:673 bytes
SHA256 hash: ee17f2b43642969d1e3d8ab659ca9c8b8472dbf79e0e3601ded417b85916a869
MD5 hash: 21f32bdaff940c316b978a51656b168a
MIME type:application/x-java-applet
File name:github-mixin-loader-2.1.2-obfuscated.jar
File size:1'560'085 bytes
SHA256 hash: 844eaf540aa48b52abe9bdc72ab50265dade3d69c7948dd6b4a454b49113aa4d
MD5 hash: 089f59d811c427046daf37e0438ef897
MIME type:application/java-archive
File name:HudMixin$1.class
File size:879 bytes
SHA256 hash: 46682d4a9ff47c5b81838e379d1e234a9cd00127aa200d03bd7f896fe419dc54
MD5 hash: f957ac8bf367f3ef459d88b0e4ff697d
MIME type:application/x-java-applet
File name:Anchor$4.class
File size:927 bytes
SHA256 hash: 6a445462925e39ae066a19690424caa3d99ba9e5e48381d539f1e1fb805a8c96
MD5 hash: 318f978d2d5e04958e075bc7a67e3523
MIME type:application/x-java-applet
File name:SprintOptions.class
File size:13'045 bytes
SHA256 hash: ee9b0458299fa9414779fa3771b88e570ab484114f5261068e11f4384520d672
MD5 hash: 9fbe145f4526307ac865485e653ffba7
MIME type:application/x-java-applet
File name:Anchor.class
File size:1'897 bytes
SHA256 hash: 06f4914469d8c523925ec07bda764693c7523d33a0b8d4f109667b6efe364b6b
MD5 hash: c279300f50939d4ea8f9705ef0de7ede
MIME type:application/x-java-applet
File name:icon.png
File size:6'312 bytes
SHA256 hash: 429b3cc4b15868de72a3aec6118b8e1a82fe84e56b6735095dc62fad6d5ec3c3
MD5 hash: 3c273febce9d9066b9a6e564ee71bf74
MIME type:image/png
File name:LICENSE_toggle-sprint-display
File size:7'815 bytes
SHA256 hash: f831e7eed577481687a9bc0b48024e5e40b6f655fcde073ede964b50be5d55d9
MD5 hash: cc46e3e9ef97cbdc56318ee7ff23d73e
MIME type:text/plain
File name:SettingsScreen.class
File size:2'015 bytes
SHA256 hash: f779791fecff79682674a5f5c3a36d1fea4e47bba771c069a0182c808e0ce99b
MD5 hash: ef1b61cd7e34e20a2b084dd2b25aef75
MIME type:application/x-java-applet
File name:toggle-sprint-display.mixins.json
File size:248 bytes
SHA256 hash: 1dbc5e081641a45fa26bc17d3524a9722c61d18e24600617db766ea914b78f8f
MD5 hash: c393dd759e7e4881780a798ba6321b8c
MIME type:text/plain
File name:fabric.mod.json
File size:696 bytes
SHA256 hash: a5d49e5679c7abb3e06920db9709443f51aab026730b3159200c4cc1b54c6e4e
MD5 hash: 02c1397ca3d0132da5216075922badda
MIME type:text/plain
File name:Anchor$3.class
File size:847 bytes
SHA256 hash: c28d2e950f7fa55c545e4b23ae4c4f67e6880df9109966fc7d5394e2e2fa781d
MD5 hash: 80ed04cf29e10100506718b8f0e31536
MIME type:application/x-java-applet
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Java.SuspAttach.73359726.UNOFFICIAL
Create hunting rule

Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
masquerade
Link:
https://www.filescan.io/uploads/6abd063b04ec88ff65edbf84/reports/2bd3086b-4dca-4cdc-a056-1c17e7ef3bdb/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1
Verdict:
Unknown
File Type:
jar
First seen:
2026-09-28T13:35:00Z UTC
Last seen:
2026-09-28T13:48:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Zip Archive
Link:
https://app.malva.re/file/73f13d52327a956990297b38c39f6aa6
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1/
Threat name:
Binary.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-09-24 20:30:29 UTC
File Type:
Binary (Archive)
Extracted files:
44
AV detection:
5 of 24 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ptp54khek7ulqb272xlilr375zqcrfw76yklp4mleuci57gz4hyq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260930-rwdm9ssxfv/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:ANDROID_Sample_Unique_2599c5a6
Create hunting rule
Author:Marjoriefort
Description:Specimen unique (soumission Bazaar) - strings distinctifs propres au sample
Reference:2599c5a6191bc208c4f0f1fcafba81b0f8d4099de6dc8d64ee7aec0b5289833e.jar
Rule name:JAVA_Malware_Unknown_ForgeAuto_90eece6c_Extrait
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat extrait)
Rule name:MULTI_Malware_Unknown_ForgeAuto_6dc545a6
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (inconnu, etat binaire)
Rule name:MULTI_Malware_Unknown_ForgeAuto_b2a4008d
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (inconnu, etat binaire)
Rule name:MULTI_PUA_ToggleSprintMod_MassSubmit
Create hunting rule
Author:Marjoriefort
Description:Mod Minecraft toggle-sprint-display (com.aeltumn) soumis en masse - pattern anormal + mixin-loader obfusque, PUA a confirmer
Reference:misses_archive 569 / grappe 39 archives identiques

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

zip 7cdfde28e457e8b8075fd5d685c77fee602896dff614b7f18b25048efcd9e1f1

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/3922069/

Comments