MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f46787754c9b150f4cd910e5d8b5910eb743823b27f21f7745fcaab0ddb2b401. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 5

Intelligence 5 IOCs YARA 13 File information Comments 1

SHA256 hash:	f46787754c9b150f4cd910e5d8b5910eb743823b27f21f7745fcaab0ddb2b401
SHA3-384 hash:	a9fc67c7db64f1a84bcd2585ab57409b60af8237c22f28d490da36efafbd32c4cf3ea4939b107b13a5564ad4b8c23885
SHA1 hash:	43c9b960e3a3a755a2a2a24ac55024beea277820
MD5 hash:	c0261f92c3286d07ffd851925f6265b6
humanhash:	paris-montana-virginia-lima
File name:	doomsday.jar-donutsmphack.com
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	3'156'198 bytes
First seen:	2026-09-27 02:05:06 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	49152:1kWZZxZO9UanlfJA/T4mEZAitMtgHFXl32NjN5C6Zjb4dKG7gfs+oqxz2UKHVg0:1lhZ3ai4j5ENHCxBgzhxJ0
TLSH	T136E53390F2F88703E19764B68997C1D784462BC7E5210ADE49F737EE6CD63BCAC90489
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	GhostTypes
Tags:	EtherHiding jar minecraft SilentNet stealer

Intelligence

File Origin

# of uploads :

# of downloads :

117

Origin country :

File Archive Information

This file archive contains 33 file(s), sorted by their relevance:

File name:	i.class
File size:	539 bytes
SHA256 hash:	8bc33f06cebb56d76d21aee22bfd7836446ee837bfc0064bb50652ba2f6e5f3c
MD5 hash:	647e4293660213d5c68ca4bdcef90d92
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	58FV7P792NPFN
File size:	2'291'396 bytes
SHA256 hash:	1fdf663da9389d852043bffa14bd4e643a610f2fbcc7d44f16a422f99dee008f
MD5 hash:	25fff52790923b50b6981c681a6fd0b3
MIME type:	application/octet-stream
Signature	SilentNet

File name:	addon4.json
File size:	372 bytes
SHA256 hash:	f18d6576740d45ff80c5a537185bc17678f2cda2fe36e6fdab98d21320a9f2ad
MD5 hash:	1a0ba1d8deca11cf8d206a63629ef374
MIME type:	text/plain
Signature	SilentNet

File name:	r.class
File size:	602 bytes
SHA256 hash:	87657f921d17ee84c1194aac4da6358c5481b73f69603d419e0c67c07103a60c
MD5 hash:	687612661f8c7e2e65f915c434fe0af7
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	MANIFEST.MF
File size:	452 bytes
SHA256 hash:	7155938770c6a8ccd76cd554b5fd257788ce5a17e3f1cc076795978e15a7bf99
MD5 hash:	e92632bffccd87417040cdee028e255d
MIME type:	text/plain
Signature	SilentNet

File name:	f.class
File size:	1'055 bytes
SHA256 hash:	421b86431eabf736c9d65bddedb4ed4c58032b0f72fb78f9321b2943e89e0b26
MD5 hash:	5282ddcf32dc84e6cf22f7c5e54d85dc
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	sveUtils.class
File size:	23'957 bytes
SHA256 hash:	7376f8ccfc2d88e4359d61a295cd23b051bebbab4e3fb1c21893f5b9d6fcc054
MD5 hash:	4939dae642e611e2b06c1f7d099fa997
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	l.png
File size:	7'103 bytes
SHA256 hash:	86588927143380ce0cadba4da72e38dc1d6ac2d1402eadf43ad0f8d9d2b2a0e7
MD5 hash:	90231de736b607b37327f4f0f417cb98
MIME type:	image/png
Signature	SilentNet

File name:	mcmod.info
File size:	42 bytes
SHA256 hash:	289ed13de2f1156bb44c173ae908b2e372d1aba475c9e5ad147e3902b034a285
MD5 hash:	26592b6d531dc0509a30cd04c28f6b52
MIME type:	application/json
Signature	SilentNet

File name:	g.class
File size:	14'954 bytes
SHA256 hash:	531b6a928bc559eb3b17f89d27b90ca7135456a47dc492aa9b1264d09bce3136
MD5 hash:	7e0e7515549b5e9b1dbbc2c5d3a60a37
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	mod_d.class
File size:	613 bytes
SHA256 hash:	a8ba3d0bf1f3639c4113f8519137c64c67f5d0f1861283b6aa174c3a41ac1067
MD5 hash:	53820beb9c69ad861f13b9ef24cb9fb8
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	b
File size:	17'474 bytes
SHA256 hash:	8037b30936b4cc28edffbca4796bf0dffe690890866cab8d52242491579b3f8a
MD5 hash:	0c7e6bb6a1ae191787aae3e877d96bcb
MIME type:	application/octet-stream
Signature	SilentNet

File name:	addon3.json
File size:	275 bytes
SHA256 hash:	7e779051ef82eb0e923d339ed618179cb81cee0407484e74d895deb6a3d8d00b
MD5 hash:	27206f9b81c032e8bd357cbba800d801
MIME type:	application/json
Signature	SilentNet

File name:	ccqtzJqw$pmkzQe.class
File size:	2'592 bytes
SHA256 hash:	579112e3e7b4e10bfaaac03ab98d5463d2359fa196572f703b6d4e2b53b265d8
MD5 hash:	058bc8bf7d4a1cb60c87f9aadf6259d8
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	s.class
File size:	681 bytes
SHA256 hash:	7f5a0ec38ffeecf7b0ec487ce0a9c665bb0a9489672b88d45a261534f6f360d6
MD5 hash:	046bd45a25aa64dd2a99521fb15c08de
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	hpAYV66l_KP.class
File size:	119'855 bytes
SHA256 hash:	a425df85e925c050c1c373e7a6dc9ca7464542f43fd30ded9f38800525c1c095
MD5 hash:	10dab9a5530c720ece7ef61be8665da7
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	k.class
File size:	1'984 bytes
SHA256 hash:	a571fcca6a366284abc6417fdd35121241eab30c3946552188e252db5fc5b9a1
MD5 hash:	035de0487a4d55f24b79c7a63641862f
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	a
File size:	214'228 bytes
SHA256 hash:	1620b6bcf727e9e5f9a4b0da0ac7f4304a9019c82bb1d11b39c54bbdea119755
MD5 hash:	10f48ac4946a6f5ca017e65f83946d5e
MIME type:	application/octet-stream
Signature	SilentNet

File name:	c
File size:	397'264 bytes
SHA256 hash:	adc525e2a147565cf535b8a3d647dfb333d1221043fae7c7bcba3b1afd563838
MD5 hash:	da58344e441ac25debde570b5ba94bbf
MIME type:	application/octet-stream
Signature	SilentNet

File name:	pack.mcmeta
File size:	45 bytes
SHA256 hash:	5160a5aab4d0f06a4277628517e5b7f498b0aa336d36ea59ae09a31ac53ee6d8
MD5 hash:	b4c84bc55ad349b1c4baae80e474357b
MIME type:	application/json
Signature	SilentNet

File name:	h.class
File size:	475 bytes
SHA256 hash:	e22251414622d791350a329e11785723db0e4143401dc6055aca84b5427ef12a
MD5 hash:	4572d5722efe00b10bdb96ac9da2d5f1
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	ccqtzJqw$crQXnpIivib4j.class
File size:	1'834 bytes
SHA256 hash:	32773bcd34ed5109102b17d7b83fb92e6947c42145dd3c315214f6ed0d4f3697
MD5 hash:	7293e0c5aec4822f3129e1a4050d40e2
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	fabric.mod.json
File size:	152 bytes
SHA256 hash:	7a32f6f36bfd69196eac8f980dd568166d89faa938cb823367297f7a260bfec6
MD5 hash:	aa6c6e45026e13075694061c909dd160
MIME type:	application/json
Signature	SilentNet

File name:	t.class
File size:	513 bytes
SHA256 hash:	daa3d5c4b98627f51bc0bb568df3b634d19698119d30016233ba2d74747800e0
MD5 hash:	0d514702596023a81129f633332f7874
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	e
File size:	14'101 bytes
SHA256 hash:	a998cd37067fcbf1c937626f1e491da078d687fdcb9bc2794818af7c0e441d0d
MD5 hash:	6f61f8a065f444ea1890a78642c35485
MIME type:	application/octet-stream
Signature	SilentNet

File name:	mods.toml
File size:	125 bytes
SHA256 hash:	7cc6fdb2b02261dee8c38c006e04d27e31f02dfb9f98ef5849861b82c7e1d8c9
MD5 hash:	767123c1048eed1cdf5d41789c6f5b2a
MIME type:	text/plain
Signature	SilentNet

File name:	m.class
File size:	2'102 bytes
SHA256 hash:	2be521ab932a615fda12716c4d4311f8badcf4fcebbcae8ee1648a366384ca82
MD5 hash:	f4f1edede0cca1b01247073bb905f37a
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	bGqwwqwe.class
File size:	14'342 bytes
SHA256 hash:	f01d041b00597c49a2e24127059fbc33c798ae85aa0a997c613002033556ae5b
MD5 hash:	0286e73892768b2b30cf70992f8f1ad2
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	ccqtzJqw.class
File size:	49'367 bytes
SHA256 hash:	e01a644fc50c8da0668ded93127ce85cacbde5d29a746eccc9847457f9559d01
MD5 hash:	4e372477d58e55dfa1ff0931ca33d6be
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	l.class
File size:	15'678 bytes
SHA256 hash:	6623a3d9122a0939f69a3c650a889345353964e0750b4d659f172321be7a48b9
MD5 hash:	0c2ec9044915d9a5bd77d52a36615293
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	y.class
File size:	2'058 bytes
SHA256 hash:	f5701ef775f9521e6e0cae747a12e729fa0a652132780e1d0626303f59f3f4cd
MD5 hash:	ee02645b743cdf51c467d55950850727
MIME type:	application/x-java-applet
Signature	SilentNet

File name:	d
File size:	106'215 bytes
SHA256 hash:	607102710629545f46d86107193eaf1c95309cff4ffc34dbd16c0f57856533ff
MD5 hash:	ff948c55c4338aa087c4341f1a172cec
MIME type:	application/octet-stream
Signature	SilentNet

File name:	ccqtzJqw$bsqcMjtxjp.class
File size:	2'641 bytes
SHA256 hash:	401e8679548c637c7df9f9172922f9fbe0c12572323ffadb397fbb604c99e514
MD5 hash:	de7c8cd396ad26ec6e1f4d736b6e58b0
MIME type:	application/x-java-applet
Signature	SilentNet

Vendor Threat Intelligence

No detections

Detection(s):

SecuriteInfo.com.Java.Malware-gen.22188183.UNOFFICIAL

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

anti-debug masquerade obfuscated

Link:

https://www.filescan.io/uploads/6ab8c0a8e0f068a3d44416f9/reports/6d79a399-6dce-4758-bc33-cdad2b6ea64d/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f46787754c9b150f4cd910e5d8b5910eb743823b27f21f7745fcaab0ddb2b401

Verdict:

Malicious

File Type:

jar

First seen:

2026-07-08T18:21:00Z UTC

Last seen:

2026-09-28T18:06:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/f46787754c9b150f4cd910e5d8b5910eb743823b27f21f7745fcaab0ddb2b401/results?tab=lookup

Score:

Verdict:

Benign

File Type:

Result

Malware family:

silentnet

Score:

10/10

Tags:

family:silentnet stealer

Link:

https://tria.ge/reports/260927-hbbthasycs/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f46787754c9b150f4cd910e5d8b5910eb743823b27f21f7745fcaab0ddb2b401

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	DetectEncryptedVariants Create hunting rule
Author:	Zinyth
Description:	Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded

Rule name:	JAVA_Malware_Unknown_ForgeAuto_03a7ca91 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_0ece8eba Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_1fde0fe5 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_50b45f1d Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_5888acd8 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_61773a0a Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_9790f193 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_be757529 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	JAVA_Malware_Unknown_ForgeAuto_f5701ef7 Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (class, etat binaire)

Rule name:	MULTI_Dropper_Unknown_GitHubObfuscated_JAR Create hunting rule
Author:	Marjoriefort
Description:	JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:	Veille glissante 2026-09-17_22 / grappe 21 JAR

Rule name:	MULTI_Malware_Unknown_ForgeAuto_b2a4008d Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (inconnu, etat binaire)

Rule name:	RANSOMWARE Create hunting rule
Author:	ToroGuitar

File information

The table below shows additional information about this malware sample such as delivery method and external references.

No further information available

Comments

Login required

You need to login to in order to write a comment. Login with your abuse.ch account.

commented on 2026-09-30 02:48:58 UTC

SilentNet fake-mod payload from donutsmphack.com fake-mod hub (Meteor/Wurst/LiquidBounce/Glazed impersonation, /downloads/ direct serve). Hub killed 09-27: Cloudflare restricted + origin KEYUBU (TR) suspended the server within 8 minutes of abuse report. doomsday-protector wrapped build.