MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b
SHA3-384 hash:	345ba8ed3b56d3135831230e1e8d0c7e8f3cb9cf69528ec5ebe994ec87c2ad2555a3e5759801ee165f0303010083936f
SHA1 hash:	3777848b1c8a6d1bae1e608d98060d8d4727e3b9
MD5 hash:	0ba861da8d1bb18ab35ca1e30122ae72
humanhash:	victor-alabama-pip-september
File name:	NekooCraft.jar
Download:	download sample
Signature	RapidStealer Alert Create hunting rule
File size:	223'771 bytes
First seen:	2026-07-02 22:45:43 UTC
Last seen:	2026-07-02 22:48:39 UTC
File type:	jar
MIME type:	application/zip
ssdeep	6144:fNQnUfduZz+L+7TdR4/z6SEGQpAMsva9qiAGht:fNQnUFuZyLWdR4/+JGQ+Bg
TLSH	T1972401048DA85526E6B73271C12100D2B52FD28E528E7C7709FB06DFAD96EAC953372E
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	lucibee
Tags:	jar RapidStealer

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

103

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN

Malware family:

n/a

ID:

1

File name:

_f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b.zip

Verdict:

No threats detected

Analysis date:

2026-07-02 22:48:05 UTC

Tags:

arch-doc

Link:

https://app.any.run/tasks/018f8be0-4b06-4bc4-b0e7-3d3af0cdadfe

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/72698/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a46ea22949bf83c342bbe4d

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6a46ebaddb9edf1bf95e7bc1/reports/8b2eb455-7082-4dc1-9888-3fb3fb1d1f22/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

jar

Link:

https://opentip.kaspersky.com/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b/results?tab=lookup

Nucleon Malprob Benign

Score:

1%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6xzgh3anzy6jvxbkpmz2am5erbs6vldjbhcqekzabphgccbdevfq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260702-2pr77afz7y/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/f5f263ec0dce3c9adc2a7b33a033a48865eaac6909c5022b200bce610823254b

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/72698/