MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206
SHA3-384 hash:	ce4e0d24f0a0bfbe1c994382117ad4bb25f3ab294e05ad7f34b53a0358dcdd65740e61890969389f9041f2afdc5600e7
SHA1 hash:	d6f6374b9a548949867fbbc4a956116d1065ade4
MD5 hash:	8499eadc32955b81075383cb2c9bf247
humanhash:	london-shade-saturn-music
File name:	d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206.jar
Download:	download sample
File size:	23'066'609 bytes
First seen:	2026-03-17 13:56:48 UTC
Last seen:	Never
File type:	jar
MIME type:	application/java-archive
ssdeep	393216:nuwn6pOT72BonVCU04tZAdZhnSmAXYp9LGc9jSPhxLW3VMWldgR8mBQ2fM:zeo7wnx4nAPdTkYplGkS3W3VMW09Nk
TLSH	T18A3701177DD6DA2AD94BA53618A1C963B82911FDD80FD06BC2E44C8A4C73C850B53FEE
TrID	48.2% (.JAR) Java Archive (13500/1/2) 37.5% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 14.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	JAMESWT_WT
Tags:	jar SugarSMP

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

122

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206.jar

Verdict:

Malicious activity

Analysis date:

2026-03-17 14:03:19 UTC

Tags:

discord anti-evasion stealer aegis evasion

Link:

https://app.any.run/tasks/d98f9af7-43d1-47bf-83a0-f75d4903bdc8

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/57740/

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b95ded93b644ca466ae67a

Tags:

shellcode

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Link:

https://labs.inquest.net/dfi/sha256/d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

jar

Link:

https://opentip.kaspersky.com/d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=22bs5tanasqgeh56d3izgekxp5vhkc73nbdaqcn4tx5fohbceida._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

defense_evasion

Link:

https://tria.ge/reports/260317-q9ft4sdz5s/

Behaviour

Suspicious use of WriteProcessMemory

Views/modifies file attributes

Contacts third-party web service commonly abused for C2

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.65

Link:

https://yomi.yoroi.company/submissions/d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/57740/