MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb5dcd74fe2a7c46fbcdd9afc23f60c86ce70ccea47659cecaf390a16694354a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: cb5dcd74fe2a7c46fbcdd9afc23f60c86ce70ccea47659cecaf390a16694354a
SHA3-384 hash: 7e3b75109348c52a3649897674a7f7ec6d6adef7ff6737cd1c77aab404c96452a0fb5fa43c1a0aaada363d079ea26174
SHA1 hash: 19d20557cb1878c341616cafb03d959d385230ba
MD5 hash: 188caced7200d990b8457f43efc79b48
humanhash: september-beryllium-aspen-maryland
File name:AppleSkin-3.0.7mc1.21.11.jar
Download: download sample
File size:489'318 bytes
First seen:2026-03-17 20:36:48 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 12288:MQR3wr2TMhy7AGUUsJY4bplSqbcXjDhlOlchS6fTwhq8zGf:Mkvl7jMYAvSqIzlSc8gWq2c
TLSH T100A4D07BF9088956EE2FD47A40C24A23FDB9A6E0E44B706F11B0461354F3D8A6F307A5
TrID 57.8% (.JAR) Minecraft Fabric Mod (24020/2/4)
32.5% (.JAR) Java Archive (13500/1/2)
9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar WeedHack

Intelligence


File Origin
# of uploads :
1
# of downloads :
76
Origin country :
NL NL
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
AppleSkin-3.0.7mc1.21.11.jar
Verdict:
Malicious activity
Analysis date:
2026-03-17 20:03:00 UTC
Tags:
etherhiding anti-evasion stealer auto-sch auto-reg antivm websocket

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1885218 Sample: AppleSkin-3.0.7mc1.21.11.jar Startdate: 17/03/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Threat name:
Package.Trojan.Generic
Status:
Suspicious
First seen:
2026-03-17 20:03:13 UTC
File Type:
Package (Java)
Extracted files:
356
AV detection:
3 of 24 (12.50%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments