🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SilentNet


Vendor detections: 4


Intelligence 4 IOCs YARA 4 File information Comments 1
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29
SHA3-384 hash: 291d33706bb6b3fe50ac3cc669ba6d9d95f57b4edbe63c12ab2565b8af567894ff61ea6e1e53654623cac0bd4a00a8d0
SHA1 hash: 0df152ecd9e9aca8e5c491d98817bed0c082ca55
MD5 hash: c2dff34bf01b70743c336108a17fcb60
humanhash: october-grey-spaghetti-spaghetti
File name:polinex-client.com__PolinexClient-1.4.2.jar.quarantined
Download: download sample
Signature SilentNet
Create hunting rule
File size:2'776'814 bytes
First seen:2026-10-26 14:25:53 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 49152:uBEHAittoNSWh7JaxdMgd36y3Upkaf+vsPCNjwn0QYE3axHrnJd2cZMkK:oEHhtoNS6J5mWr+vsuc/KV9dtlK
TLSH T110D5335734BE0563864A3B6EE4DDBE86C0160684B87A5F36EF31C3236FCA596CA71017
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter GhostTypes
Tags:jar SilentNet zip


Avatar
GhostTypes
SilentNet loader. File type: Minecraft Fabric mod (.jar). Source: https://polinex-client.com/ (a fake Minecraft client download site). The jar reads an Ethereum contract (0x728198F69184f7d7ca607617cb9B79f28e1C43c2) to get its C2 host. Verdict: static analysis with bbmmd. The sample was not executed.

Intelligence

File Origin
# of uploads :
1
# of downloads :
115
Origin country :
US US
File Archive Information

This file archive contains 12 file(s), sorted by their relevance:

File name:MANIFEST.MF
File size:696 bytes
SHA256 hash: 37a17cb091e9670a69789eaf51965e7b6893f011c9b6800be5360e8b8829f3b4
MD5 hash: c72fa8d889def1acb859f598cbbb99e9
MIME type:text/plain
Signature SilentNet
File name:Qtcic.class
File size:72'987 bytes
SHA256 hash: d4ea1dbd60b6ea029423f9709dacb47691b2d318d969b042308c5ab9a38a5f86
MD5 hash: 470f02bb95115f897253a69c385b5a6a
MIME type:application/x-java-applet
Signature SilentNet
File name:_r62uxepjs$nhvix.class
File size:3'571 bytes
SHA256 hash: 7c2716fd207785c85bf51b71868572bf41416085cad1de254d6cf3bafb80c24f
MD5 hash: ff31687cf8a11ec78a3ae0797bf61597
MIME type:application/x-java-applet
Signature SilentNet
File name:_r62uxepjs$H0uiceq1q.class
File size:3'620 bytes
SHA256 hash: 270845b656ca2ea38cd2f2c0b3070fe76d93581b0c9099923365b99d103077fa
MD5 hash: a6efeb61f945d4ecaf6017ea5ded2beb
MIME type:application/x-java-applet
Signature SilentNet
File name:_r62uxepjs$_vw7nhghi.class
File size:2'171 bytes
SHA256 hash: b8865cca873cd4f9d74bc95112313cfa79032ab8ee6053102b0b8c190e65cab6
MD5 hash: 7a361dc31df9087afaa4b8cac4deb56c
MIME type:application/x-java-applet
Signature SilentNet
File name:okhttp-4.12.0.jar
File size:795'227 bytes
SHA256 hash: 5bb8c90585971a170662fc80aa4196642f34dfbe24b86a3befef48f9d651c0fc
MD5 hash: cb8b8acb3b76ec9a3130e386d77a8d21
MIME type:application/zip
Signature SilentNet
File name:build.json
File size:108 bytes
SHA256 hash: 7be068d83590d4b7df04271003d6a5b4d04a1e09ef875c371428fb83d4d5a4d8
MD5 hash: 4ea4a2f4e9a2bc92696476891bfb8e9d
MIME type:application/json
Signature SilentNet
File name:fabric.mod.json
File size:809 bytes
SHA256 hash: cfb58cae0fd3e7dcb7d3845aba93bfbc40f5f9937e3bb3e6b1e171960010fe0f
MD5 hash: e04e58d6d6aba6980b99b539dd1a5045
MIME type:text/plain
Signature SilentNet
File name:kotlin-stdlib-1.9.21.jar
File size:1'735'798 bytes
SHA256 hash: 6ca216ebe718bed93ae3c2626720697d87c834f425105f7a755da8f5b8eb1443
MD5 hash: 4855120e6c89826dd56ca461eef4b2aa
MIME type:application/zip
Signature SilentNet
File name:g566vlwq.class
File size:1'106 bytes
SHA256 hash: 1de277a6a0a9af18be08a648ae393b96cfaa2946ac10190e4c8a7fd144527acf
MD5 hash: 1b4c625c73ba75f8425a7507f91c0198
MIME type:application/x-java-applet
Signature SilentNet
File name:_r62uxepjs.class
File size:26'924 bytes
SHA256 hash: 543e7932e0d90d1b84e582ed0ec739efbd68251f3a3c3269baa3d7362b740bcf
MD5 hash: 5271c3c7430c1c3ee1967fddbfb7bc21
MIME type:application/x-java-applet
Signature SilentNet
File name:okio-jvm-3.6.0.jar
File size:359'821 bytes
SHA256 hash: 2730b50b06f35bb59a2984c0a2336c613f6e961f14759777545a552e209a338b
MD5 hash: 90c245bec4c4a0367f5364614861b6e7
MIME type:application/java-archive
Signature SilentNet
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Java.SuspAttach.41864357.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
89.3%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6ad64b7aafb06e650cd7dc36
Tags:
n/a
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6adf63148cdd4e3191ace1eb/reports/82e1aa16-136f-469e-b27f-dff091f928d2/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29
Verdict:
Malicious
File Type:
jar
First seen:
2026-10-26T13:49:00Z UTC
Last seen:
2026-10-27T19:22:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Zip Archive
Link:
https://app.malva.re/file/c2dff34bf01b70743c336108a17fcb60
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29/
Threat name:
Win32.Trojan.Qwexlafiba
Create hunting rule
Status:
Malicious
First seen:
2026-10-21 02:26:34 UTC
File Type:
Binary (Archive)
Extracted files:
1437
AV detection:
5 of 24 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uq6repezydfikothy4wdfexivhyrfkzp5lybpox2widdvrhuxuuq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/261026-sal8ystv4l/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
Rule name:JAVA_Malware_Unknown_ForgeAuto_0ece8eba
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:JAVA_Malware_Unknown_ForgeAuto_8814e6c9
Create hunting rule
Author:Marjoriefort
Description:Detects Unknown (class, etat binaire)
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

zip a43d123c99c0ca853a67c72c3292e8a9f112ab2feaf017bafab2063ac4f4bd29

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/4035637/

Comments


Avatar
GhostTypes commented on 2026-10-26 14:25:57 UTC

SilentNet loader. File type: Minecraft Fabric mod (.jar). Source: https://polinex-client.com/ (a fake Minecraft client download site). The jar reads an Ethereum contract (0x728198F69184f7d7ca607617cb9B79f28e1C43c2) to get its C2 host. Verdict: static analysis with bbmmd. The sample was not executed.