🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 adc154713a46bed33445dab66b73f8d85b215e838f20d6ec84d19cf17d3ebda1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



SilentNet


Vendor detections: 7


Intelligence 7 IOCs YARA 2 File information Comments

SHA256 hash: adc154713a46bed33445dab66b73f8d85b215e838f20d6ec84d19cf17d3ebda1
SHA3-384 hash: bebc9adf2b39493fd8f1fed43635e1aeb291955914c4aafc19b34e1369abb0951014b399a57d89d32e540dd2d02f6178
SHA1 hash: 6aa529a12a5053fe79de448fcc8dbaa0406311d6
MD5 hash: 4254242e27eac156a0d496bd26af2607
humanhash: hamper-charlie-delta-island
File name:opsec-1.21.11+v1.1.7.1.jar
Download: download sample
Signature SilentNet
File size:558'035 bytes
First seen:2026-10-12 19:05:21 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 12288:uRWrINk6CHnbVNC1OhLALS8KrYbrfPoxNLI5JroOHHzd:uRhxCHy1Omm0vHorU5JxHR
TLSH T1A0C41207F87A593CE12BA676E8034FB0BD7416508106362E74BA520BD98B5F727D239F
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter NyxIndius
Tags:jar SilentNet

Intelligence


File Origin
# of uploads :
1
# of downloads :
135
Origin country :
BR BR
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
jar
Verdict:
Malicious activity
Analysis date:
2026-10-12 19:30:54 UTC
Tags:
arch-doc silentnet stealer etherhiding evasion python auto generic arch-exec openssl tool

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Malicious
Score:
90.2%
Tags:
java
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
anti-debug obfuscated
Verdict:
Malicious
File Type:
jar
First seen:
2026-10-12T17:15:00Z UTC
Last seen:
2026-10-13T18:21:00Z UTC
Hits:
~10
Threat name:
ByteCode-JAVA.Trojan.Qwexlafiba
Status:
Malicious
First seen:
2026-10-12 05:21:54 UTC
File Type:
Binary (Archive)
Extracted files:
220
AV detection:
9 of 24 (37.50%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures


MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:MULTI_Dropper_Unknown_GitHubObfuscated_JAR
Author:Marjoriefort
Description:JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:Veille glissante 2026-09-17_22 / grappe 21 JAR
Rule name:SilentNet_FakeFabric_Mod_Jar
Author:NyxIndius
Description:Detects SilentNet Minecraft stealer fake Fabric mod JAR: fabric.mod.json plus random-named classes directly under com/github/ or net/fabric/ (incl. inner classes), without net/fabricmc/

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar adc154713a46bed33445dab66b73f8d85b215e838f20d6ec84d19cf17d3ebda1

(this sample)

  
Delivery method
Distributed via web download

Comments