MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SilentNet


Vendor detections: 10


Intelligence 10 IOCs YARA 4 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a
SHA3-384 hash: 18495b88e37e28a894294c4552e0cf386ff013573fdf96de9df820221cb06f0fd0eb7af54ef1b27def6a01cee3a0948c
SHA1 hash: a585c2f973e6516ae6a41403b422d8f59ad370ac
MD5 hash: 0aa174ef161f3eab5dd93fae034c8035
humanhash: finch-potato-don-april
File name:SakuraClient.jar
Download: download sample
Signature SilentNet
Create hunting rule
File size:5'750'132 bytes
First seen:2026-06-16 11:02:58 UTC
Last seen:Never
File type:Java file jar
MIME type:application/java-archive
ssdeep 98304:jpbC3ozei3FiVN1oizh3aslXf5A6jkj+nbmGFstzwogFb0dkflDKHTEZ:9C35Dh3asxjkKyBtzwogFbekflDKHoZ
TLSH T1984633E9D2884EB3F5E50FFBC21135864A67A818858E1B0E02F9723DB6D5F4FC14D968
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar SilentNet

Intelligence

File Origin
# of uploads :
1
# of downloads :
119
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
RadiumClient.jar
Verdict:
Malicious activity
Analysis date:
2026-06-07 15:23:04 UTC
Tags:
etherhiding arch-exec arch-doc evasion
Link:
https://app.any.run/tasks/81ee8ffe-b0f5-4008-bcf0-5135beeeb3c6

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/70941/
Detection(s):
SecuriteInfo.com.Trojan.Generic.39913806.10007.21278.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Score:
96.5%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a258cd42f0f550abbfa530d
Tags:
shellcode trojan virus java
Verdict:
Malicious
Labled as:
Trojan.Generic
Link:
https://www.hybrid-analysis.com/sample/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a
Verdict:
Malicious
File Type:
jar
First seen:
2026-06-01T10:57:00Z UTC
Last seen:
2026-06-16T10:05:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a/results?tab=lookup
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/1928670
Signature
Joe Sandbox ML detected suspicious sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1928670 Sample: SakuraClient.jar Startdate: 16/06/2026 Architecture: WINDOWS Score: 52 13 mr-b01.tm-azurefd.net 2->13 15 casoneroutegold-prod-bggfgca0dkaag8a8.b01.azurefd.net 2->15 17 Multi AV Scanner detection for submitted file 2->17 19 Joe Sandbox ML detected suspicious sample 2->19 7 cmd.exe 2 2->7         started        signatures3 process4 process5 9 java.exe 3 7->9         started        11 conhost.exe 7->11         started       
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a/
Verdict:
Malicious
Threat:
Family.SILENTNET
Link:
https://tip.neiki.dev/file/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a
Threat name:
ByteCode-JAVA.Trojan.Suschil
Create hunting rule
Status:
Malicious
First seen:
2026-06-01 11:02:01 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
11 of 24 (45.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rrv6fkzy7hk7766heaffiibc6lghr5jzxw3nvhpsq46l4rrn6fva._file
Result
Malware family:
silentnet
Create hunting rule
Score:
  10/10
Tags:
family:silentnet stealer
Link:
https://tria.ge/reports/260616-m6qncsc19y/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/8c6be2ab38f9d5fffbc7200a542022f2cc78f539bdb6da9df2873cbe462df16a

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/70941/

Comments