MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d340418d4c91daa1fb6b22d4549337db6d5f6d7f0be41e6130f69020782e6cb5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 4

Intelligence 4 IOCs YARA 1 File information Comments

SHA256 hash:	d340418d4c91daa1fb6b22d4549337db6d5f6d7f0be41e6130f69020782e6cb5
SHA3-384 hash:	ec43482bf0c877b7aae34c69bf7ce115802db9b37d1ddbaa4f29399e3222b52d5f65224fd0e979913176d135ac275c39
SHA1 hash:	88c4e990538edf350076e304602971d2c5edffe6
MD5 hash:	7f41f2a149d440adc112e4f75cd33083
humanhash:	wolfram-fourteen-pizza-wolfram
File name:	GoobaCracked.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	19'744'852 bytes
First seen:	2026-10-06 15:24:51 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	393216:VrC+rCxu0keY1eWdB3IHr9ODWMMsap9NEFZuLi57K2XbgCP0Ss:VrrxJeY1eG3ILsq1po2W52OfMf
TLSH	T13A17335154B83A35DB373230881C4ED2F66C0284C2DEB59DAAF88FE5B4934D3CF5696A
TrID	57.8% (.JAR) Minecraft Fabric Mod (24020/2/4) 32.5% (.JAR) Java Archive (13500/1/2) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

https://cdn.discordapp.com/attachments/1556331995477319801/1556344677471621171/GoobaCracked.jar?backend=b2&ex=6ac523ee&is=6ac3d26e&hm=a79b5eb4da9e84d0e91b561d4bb4a1fe8e83164b7cdb83f59fc6b7e163122a56&

Verdict:

Malicious activity

Analysis date:

2026-10-06 15:22:14 UTC

Tags:

payload discord silentnet stealer etherhiding arch-exec arch-doc python auto generic evasion

Link:

https://app.any.run/tasks/7fa80916-ea06-42c4-bd1b-1c5a2157e3f3

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/90884/

Verdict:

Clean

Score:

89.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad012706f551121ba1577a9

Tags:

n/a

Verdict:

Unknown

Threat level:

2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6ac512e415467a63801b1dbd/reports/031c09fe-8885-45b2-9225-99890761c9a9/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d340418d4c91daa1fb6b22d4549337db6d5f6d7f0be41e6130f69020782e6cb5

Verdict:

Unknown

File Type:

jar

First seen:

2026-10-06T04:12:00Z UTC

Last seen:

2026-10-06T04:30:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d340418d4c91daa1fb6b22d4549337db6d5f6d7f0be41e6130f69020782e6cb5/results?tab=lookup

Score:

33%

Verdict:

Susipicious

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/261006-sts6lsas2z/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/d340418d4c91daa1fb6b22d4549337db6d5f6d7f0be41e6130f69020782e6cb5

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.