MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 e162e6195223c06137d0914f3f491afae069efd0bbe541e3e65074df16d1e7bc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | e162e6195223c06137d0914f3f491afae069efd0bbe541e3e65074df16d1e7bc |
|---|---|
| SHA3-384 hash: | 2ff16c2d01730352f5c88789a2c969ccd94674607f9e9b4789c7c9b40baf2c00b20f277c998b9a3469c71ba37e2416b8 |
| SHA1 hash: | 8d207c2b0a489429839f2b1e23fb5011db7b595e |
| MD5 hash: | db3a926a7dc262cf65f954a23289383a |
| humanhash: | paris-pip-florida-maine |
| File name: | services.jar |
| Download: | download sample |
| File size: | 13'968'936 bytes |
| First seen: | 2026-09-22 14:42:54 UTC |
| Last seen: | Never |
| File type: |  jar |
| MIME type: | application/zip |
| ssdeep | 393216:FMyVgbIr8eygXvtGMu8TQUp5sRYopY2s5:VukrBXv7DTH5sRbpYF |
| TLSH | T101E62323E8CA892DD9B761F355C24A73742D13D9E82B802FD7F04AD559B39CA4F12728 |
| TrID | 77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1) |
| Magika | jar |
| Reporter | Anonymous |
| Tags: | jar Ransomware RAT stealer zelix |
Intelligence
File Origin
# of uploads :
1
# of downloads :
100
Origin country :
USVendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
services.jar
Verdict:
Malicious activity
Analysis date:
2026-09-22 13:58:52 UTC
Tags:
arch-doc evasion uac websocket stealer discord
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Verdict:
Unknown
File Type:
jar
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Threat name:
Package.Trojan.Generic
Status:
Suspicious
First seen:
2026-09-22 14:43:23 UTC
File Type:
Package (Java)
Extracted files:
3475
AV detection:
3 of 38 (7.89%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
jar e162e6195223c06137d0914f3f491afae069efd0bbe541e3e65074df16d1e7bc
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.