MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f
SHA3-384 hash:	c2845655db4550926721d718f54473d41751ff9891814660edfb7db1b5e57e97e0b4ef11e0d1f3d3e5d66caff844d49f
SHA1 hash:	bf0a263f94663aa58aa0e58678c6f00bb7af6044
MD5 hash:	2a67354719d48a4abacf293178f25f8b
humanhash:	floor-black-fillet-bakerloo
File name:	app.jar
Download:	download sample
File size:	15'504'163 bytes
First seen:	2026-09-24 17:14:57 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	393216:UPzd1fhGgeCBnF57D6a1kis560MQmbJutj6aHNy54J0iNDvUGWO/eb56jGxW/ns8:UPzd1fhGgVBnF57D6a1kf560MDJujzHb
TLSH	T146F6F197BFCBE47AD99B497A528382D26C1D119DF80FD06F13E089850A30D460BD6FE9
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	lucibee
Tags:	Generic jar keylogger

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

83

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

https://playmanaboom.com/

Verdict:

Malicious activity

Analysis date:

2026-09-24 12:42:08 UTC

Tags:

ip-check evasion stealer discord

Link:

https://app.any.run/tasks/7e83f966-98e1-4e14-8088-c55b05fe830d

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/88840/

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

jar

Link:

https://opentip.kaspersky.com/a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f/

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-24 17:15:39 UTC

File Type:

Binary (Archive)

Extracted files:

9023

AV detection:

3 of 38 (7.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=utuqnvcd3ty3rtz6yco5bhre2atmhevnfdmyrzzk2ojhs7app4hq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260924-vssjssxdjb/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/a4e906d443dcf1b8cf3ec09dd09e24d026c392ad28d988e72ad392797c0f7f0f

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/88840/