MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6
SHA3-384 hash:	2197ba583f29616c6dce994abd71fda86126eaf26a511431de9af5665fb92bf3518d2961b5b207ae0bb24300dbf8e883
SHA1 hash:	2b483e50bbed53f625370f72a25d1d0c82c445b8
MD5 hash:	a7fe2c845878ea14d65e36e0368a5398
humanhash:	football-delaware-hamper-blue
File name:	KryptonClient-1.21.11.jar
Download:	download sample
Signature	SilentNet Alert Create hunting rule
File size:	796'113 bytes
First seen:	2026-09-13 16:34:01 UTC
Last seen:	2026-09-19 00:48:29 UTC
File type:	jar
MIME type:	application/zip
ssdeep	24576:L/fkoFdhU2VpPtNQHdfXWrLT53t8nEjU2IOW:jsi/xVy23598nEgOW
TLSH	T1A70523FC4E530A635CD72DEB9890F20AD3D46767BB00A1F5FE3522A57E6DD698483081
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

24

Origin country :

AT

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

KryptonClient-1.21.11.jar

Verdict:

Malicious activity

Analysis date:

2026-09-11 14:29:33 UTC

Tags:

silentnet stealer python evasion arch-exec auto generic

Link:

https://app.any.run/tasks/5ea53587-40e7-4c27-b34b-3191538b2706

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/85261/

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

jar

First seen:

2026-08-25T08:32:00Z UTC

Last seen:

2026-09-14T20:57:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xyphlrzoxhuspx5pk7mvgfd36nwxhkt5viumtwsfq4wtexwx5kta._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260913-wqgj7a1drh/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

jar be1e75c72eb9e927dfaf57d953147bf36d73aa7daa28c9da45872d325ed7eaa6

(this sample)

any.run

https://app.any.run/tasks/e0e3a512-0dda-4939-81d4-22ceef748a2c

  

Dropping

SilentNet

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/85261/