🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d03b57a8a19b81c31a1e4fce79cd6fcbb5f08195b1026e6fa988f0d4e51a65ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



SilentNet


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: d03b57a8a19b81c31a1e4fce79cd6fcbb5f08195b1026e6fa988f0d4e51a65ff
SHA3-384 hash: bb2e77909afa40b790eadbdaa9f104a7bfa3041b4020b23500941df75ba7c6b1b7f13209762ab21b348680a135e9470b
SHA1 hash: 128224ac18dd197fc56ca080fa7a876cbf5af4ea
MD5 hash: eb521ccc6cd94312c8ee1d655a7f247b
humanhash: juliet-muppet-twenty-hydrogen
File name:67Client.jar
Download: download sample
Signature SilentNet
File size:4'910'589 bytes
First seen:2026-10-06 16:02:57 UTC
Last seen:Never
File type:Java file jar
MIME type:application/java-archive
ssdeep 98304:zksoCv88UXPz0zrkfsqi+ffG3xNKEacEkOa7LFFQBHZ4Y9LQimrH:zOCv88krg+faadFanboHWKcimT
TLSH T1F6363344B8EC18A5D0BB113342CA0BD7B660E5DDCC98FAAF67BB6B40A5479971B0434F
TrID 57.8% (.JAR) Minecraft Fabric Mod (24020/2/4)
32.5% (.JAR) Java Archive (13500/1/2)
9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter wok
Tags:jar java Python SilentNet

Intelligence


File Origin
# of uploads :
1
# of downloads :
85
Origin country :
AT AT
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
67Client.jar
Verdict:
Malicious activity
Analysis date:
2026-10-06 15:59:54 UTC
Tags:
silentnet stealer etherhiding evasion python auto generic arch-exec arch-doc openssl tool arch-scr

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
anti-debug expand lolbin obfuscated
Threat name:
Binary.Trojan.Generic
Status:
Suspicious
First seen:
2026-10-06 16:03:23 UTC
File Type:
Binary (Archive)
Extracted files:
551
AV detection:
3 of 23 (13.04%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar d03b57a8a19b81c31a1e4fce79cd6fcbb5f08195b1026e6fa988f0d4e51a65ff

(this sample)

  
Dropping
SilentNet
  
Delivery method
Distributed via web download

Comments