🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SilentNet


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments 1
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283
SHA3-384 hash: 8c04f5eeb19b111c493f4121271d1f7947849cfc9853f11872bee9d1928b3ffd83e0a0af64faa293921db2064386f731
SHA1 hash: 0a2ff57e14f9551916cd3113c5cf7cdf265622b9
MD5 hash: edd36dd59bcd5c5451335d87aa864278
humanhash: pasta-cold-massachusetts-floor
File name:nova-client.com
Download: download sample
Signature SilentNet
Create hunting rule
File size:1'559'008 bytes
First seen:2026-09-16 03:07:42 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:Nw5T8ED+6QnwqFzUAa65wuwDxtr38a5CcX7ZqIVU3JG6d/iLyPz1P9J39L+4aVJQ:2IEq6QnwMzLcv3p5CWAIW3Fd6u9n3VT
TLSH T1847533069668E813FCF35275474DB3E9CAC9701A0ED05AAB4DB542208D5FFD84D2CDBA
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika zip
Reporter GhostTypes
Tags:EtherHiding jar SilentNet

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
FR FR
File Archive Information

This file archive contains 9 file(s), sorted by their relevance:

File name:MANIFEST.MF
File size:414 bytes
SHA256 hash: f20cbc7766cb9d9b3445c58e8402e9ec6da7454fa0ea62555939b6e56c8c2c0e
MD5 hash: bb6ee1fa6f1321a97516851800129f08
MIME type:text/plain
Signature SilentNet
File name:en_us.json
File size:226 bytes
SHA256 hash: 6691204c334151adc8653b2d91acbf77fe28acc9254acd938bc1ff0872af518b
MD5 hash: 906dd91683991ec5d3870fa012aa5c76
MIME type:application/json
Signature SilentNet
File name:github-mixin-loader-2.5.2-obfuscated.jar
File size:1'552'347 bytes
SHA256 hash: 5cec865a4428fd3b6555aa11d0423ba7cf2e367d7092d3bbeac3f000c94272b4
MD5 hash: 652529c363b0124105e541fe38a670fd
MIME type:application/java-archive
Signature SilentNet
File name:GuiMixin.class
File size:3'323 bytes
SHA256 hash: 4ef2903224d60dd8870fe1cc86d969e88755609ad5302e90c276ab2ca756733a
MD5 hash: ebe2e51be2d02598868e842183850767
MIME type:application/x-java-applet
Signature SilentNet
File name:icon.png
File size:6'312 bytes
SHA256 hash: 429b3cc4b15868de72a3aec6118b8e1a82fe84e56b6735095dc62fad6d5ec3c3
MD5 hash: 3c273febce9d9066b9a6e564ee71bf74
MIME type:image/png
Signature SilentNet
File name:LICENSE_toggle-sprint-display
File size:7'815 bytes
SHA256 hash: f831e7eed577481687a9bc0b48024e5e40b6f655fcde073ede964b50be5d55d9
MD5 hash: cc46e3e9ef97cbdc56318ee7ff23d73e
MIME type:text/plain
Signature SilentNet
File name:toggle-sprint-display.mixins.json
File size:279 bytes
SHA256 hash: 15f47095d52ae6659f685f26a8636942ce6b7c974359b81bf37b03c002e2f2b7
MD5 hash: baebace0977c87e578a3c457eb1985ba
MIME type:text/plain
Signature SilentNet
File name:fabric.mod.json
File size:615 bytes
SHA256 hash: 6074440150090effb281cedb76528352114c75aa957a66c6a5a0784ba05597cc
MD5 hash: 5e538a2cda641599082bd37282485fbb
MIME type:text/plain
Signature SilentNet
File name:toggle-sprint-display-refmap.json
File size:422 bytes
SHA256 hash: 5f15bffdb82561697b7c9beb33733c736ef4e9ac65238aa8b9f4db96f3880279
MD5 hash: 392de46494a37307bc662782de53512d
MIME type:application/json
Signature SilentNet
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Java.SuspAttach.77437714.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6ac0b91059bf6e2f9e92ceb3
Tags:
n/a
Result
Verdict:
Unknown
File Type:
ZIP File
Link:
https://app.docguard.net/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283/results/dashboard
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283
Verdict:
Unknown
File Type:
jar
Link:
https://opentip.kaspersky.com/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283/results?tab=lookup
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Zip Archive
Link:
https://app.malva.re/file/edd36dd59bcd5c5451335d87aa864278
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283/
Threat name:
Binary.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-09-14 19:27:09 UTC
File Type:
Binary (Archive)
Extracted files:
34
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3mska53xsta2ourrdtwkccj5f5ghoqpcv2hljcvubalqtxoxmkbq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260916-gpa9fshg57/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

zip db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3917240/
  
Delivery method
Distributed via web download

Comments


Avatar
GhostTypes commented on 2026-09-17 13:44:02 UTC

Distribution site: nova-client.com (https://nova-client.com/Nova-Client-1.21.11-latest.jar). SilentNet gen-4 github-mixin-loader fleet (nested github-mixin-loader-2.5.2-obfuscated.jar). Smart-contract dead-drop ETH 0x9044f5762e43b23ba91d124b51a045f1b51da652 (hidden in encrypted vm.bin) resolves to live C2 windowsdiagnostics.st; stage-2 served at https://windowsdiagnostics.st/api/static/loading. Detected by static analysis (bbmmd donki-vm).