MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 886eeabd8710c72c6fa4a1f3ffc58af11188c6ec67f33105a7a113e675c44ea5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 6

Intelligence 6 IOCs YARA 2 File information Comments

SHA256 hash:	886eeabd8710c72c6fa4a1f3ffc58af11188c6ec67f33105a7a113e675c44ea5
SHA3-384 hash:	7d465f61e95e1bb280819edb7af6fc0f2128cce276cd68ab135704ea5b5f48161798d78c418c04ec00dc1738a5d264df
SHA1 hash:	ddff75bfa631752052b027be5111271c38b5fc8a
MD5 hash:	06f97854d037e70f7490d385fb5a0daf
humanhash:	sodium-table-beer-oven
File name:	KryptonPlus.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	801'111 bytes
First seen:	2026-09-17 19:38:36 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	12288:iyG8luDto/hUjRQ6UEC+KR2cg2J9eb/6TFbqq28PENQ+rUf2E7uHzOtZLOA+x/:Dla0WNHL5c/9htneEaar9a/
TLSH	T159053334BEE05E0CE74E852A609C4C0EB86CA6CFDB0F9B0D8E744948D91C955FB68C78
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

KryptonPlus.jar

Verdict:

Malicious activity

Analysis date:

2026-09-17 18:26:03 UTC

Tags:

silentnet stealer python evasion arch-exec arch-doc auto generic openssl tool

Link:

https://app.any.run/tasks/b6db849f-ddd8-4116-b903-b40a202a57a4

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/86293/

Verdict:

Malicious

Score:

93.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6acbba4e24e6899c145f4e96

Tags:

shellcode trojan virus java

Verdict:

Unknown

Threat level:

2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6aac41e77f4a26ccb6434c13/reports/a0281cc6-595f-42ae-a926-9237c1721efd/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/886eeabd8710c72c6fa4a1f3ffc58af11188c6ec67f33105a7a113e675c44ea5

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-17T18:45:00Z UTC

Last seen:

2026-09-18T23:39:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/886eeabd8710c72c6fa4a1f3ffc58af11188c6ec67f33105a7a113e675c44ea5/results?tab=lookup

Score:

Verdict:

Benign

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/260917-yc2z3scj6t/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/886eeabd8710c72c6fa4a1f3ffc58af11188c6ec67f33105a7a113e675c44ea5

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	MULTI_PUA_FabricMod_PackageIcon_LicenseGithub Create hunting rule
Author:	Marjoriefort
Description:	Mod Minecraft Fabric (structure package + LICENSE_github) soumis en masse - PUA/mods, pattern de soumission
Reference:	misses_archive / grappe 9 archives