MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SilentNet


Vendor detections: 5


Intelligence 5 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e
SHA3-384 hash: fdea94f729477a6eaea7dd5e2b59e93c15b95dda1346c8f9661c94d8035da9af76e56cf91f90c80a931bd4c5c38bec0f
SHA1 hash: a8b28415e6fe95618db14d3e9c38d50fb66809cc
MD5 hash: 322c0867c53295a4b358bcf01bbd0ed8
humanhash: autumn-table-muppet-west
File name:SmartTweaks.jar
Download: download sample
Signature SilentNet
Create hunting rule
File size:3'036'281 bytes
First seen:2026-06-13 10:01:33 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 49152:wD4kyK7wR8R+zjc7tXdXHxMoS7oupzjJw7DrmDyGqva+fB4gmCmuJdX6aomzXhlH:wDPE8+zKHeonq9w7mGGqzfB4gLmmLRgM
TLSH T15BE533874E28980FD177A43A0EC5E875E9A504F913F77B323CD3AE7D8614BA096C81D9
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar SilentNet

Intelligence

File Origin
# of uploads :
1
# of downloads :
119
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
SmartTweaks.jar
Verdict:
Malicious activity
Analysis date:
2026-06-13 10:01:01 UTC
Tags:
silentnet stealer python evasion arch-exec arch-doc
Link:
https://app.any.run/tasks/a4ee12ef-468d-4670-821f-9700f296668f

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/70616/
Verdict:
Clean
Score:
89.3%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a2d2a5c34eaf30d8ce56249
Tags:
n/a
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6a2d2a888161ac6cb56019af/reports/74a89bc8-2ddd-43dc-a206-4fed7c7f0037/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e
Verdict:
Clean
File Type:
jar
Link:
https://opentip.kaspersky.com/e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e/results?tab=lookup
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Link:
https://www.joesandbox.com/analysis/1927576
Signature
Joe Sandbox ML detected suspicious sample
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1927576 Sample: SmartTweaks.jar Startdate: 13/06/2026 Architecture: WINDOWS Score: 22 12 Joe Sandbox ML detected suspicious sample 2->12 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e/
Gathering data
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=4zvvhq6dxoaow64xkwvlg5tcnrhwphkrdjdlvf235sy4uujoz6ha._file
Result
Malware family:
silentnet
Create hunting rule
Score:
  10/10
Tags:
family:silentnet stealer
Link:
https://tria.ge/reports/260613-l2ke4sgt4l/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/e66b53c3c3bb80eb7b9755aab376626c4f679d511a46ba975becb1ca512ecf8e

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/70616/

Comments