MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91e418ec2192b6f12aa2c73c45d80129fbaf22678c77244fcab4bbb58b4a7ed8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 5

Intelligence 5 IOCs YARA 8 File information Comments

SHA256 hash:	91e418ec2192b6f12aa2c73c45d80129fbaf22678c77244fcab4bbb58b4a7ed8
SHA3-384 hash:	1cf0e86ace9f9d6ff65054597e9e8810ed6a5241a6a8d00987196a7715774a3989ae71377ac776a4d4189c4635209edf
SHA1 hash:	8091c65402e01a2b3f71aa33433995122cc89ce2
MD5 hash:	49f5dfb87b8e604b36bf3a1cabd4ae53
humanhash:	lake-single-maine-blossom
File name:	donut-dupe 1.21.xx.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	75'116 bytes
First seen:	2026-09-23 16:46:56 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	1536:KgS5C6MzXjRRRwKI08woWNGdy81JwmP4Y/ilVUEuXu+Uc:KgS5CNrR+08LWNAy81J34Y/ilVSu+Uc
TLSH	T18D7302023FDE6789C76EEA32991FB576197B9418C31FB50729A403F98A0C36D090DB66
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

donut-dupe 1.21.xx.jar

Verdict:

Malicious activity

Analysis date:

2026-09-23 16:44:31 UTC

Tags:

silentnet stealer python evasion arch-exec arch-doc auto generic openssl tool

Link:

https://app.any.run/tasks/edeeb10b-3223-42ff-a348-1b153a4b805b

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/88672/

Detection(s):

SecuriteInfo.com.Java.Agent.ADG.tr.10189.27520.UNOFFICIAL

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6ab402955966e5989e57c4ff/reports/7e8276c5-f22c-45c9-b18d-c9de4f4c7e25/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/91e418ec2192b6f12aa2c73c45d80129fbaf22678c77244fcab4bbb58b4a7ed8

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-12T19:07:00Z UTC

Last seen:

2026-09-23T19:37:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/91e418ec2192b6f12aa2c73c45d80129fbaf22678c77244fcab4bbb58b4a7ed8/results?tab=lookup

Score:

Verdict:

Benign

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/260923-vamktstwds/

Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	JAVA_Malware_Unknown_ForgeAuto_03a7ca91 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_0ece8eba Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_1fde0fe5 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_50b45f1d Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_5888acd8 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_61773a0a Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	MULTI_Dropper_Unknown_GitHubObfuscated_JAR Create hunting rule
Author:	Marjoriefort
Description:	JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:	Veille glissante 2026-09-17_22 / grappe 21 JAR

Rule name:	MULTI_PUA_FabricMod_PackageIcon_LicenseGithub Create hunting rule
Author:	Marjoriefort
Description:	Mod Minecraft Fabric (structure package + LICENSE_github) soumis en masse - PUA/mods, pattern de soumission
Reference:	misses_archive / grappe 9 archives