MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f747505af5381cfe8aaa7e5d5840f74f53a94748d7d77cd98574ebb0f67231b7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SilentNet

Vendor detections: 4

Intelligence 4 IOCs YARA 2 File information Comments

SHA256 hash:	f747505af5381cfe8aaa7e5d5840f74f53a94748d7d77cd98574ebb0f67231b7
SHA3-384 hash:	550965941deb9056645fdb09d81f91f69785c62e8e9ad5eca70fb9aeb917ee6d4a2872f4753915b534fb0fbc490b924f
SHA1 hash:	fc12b7df4f1a9ef296b14fc43c879aee93c7d5ca
MD5 hash:	4ea7fc7a2f3146a6de6ec8e234ad5e3d
humanhash:	muppet-oklahoma-friend-oscar
File name:	krypton.jar
Download:	download sample
Signature	SilentNet Create hunting rule
File size:	2'566'716 bytes
First seen:	2026-09-20 15:03:21 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	49152:6UyiSRu0MsS9FmtHcTbQa2gEJEUqIxEk50RHLfBb4Iba445ZOkL6TN+My:6UD0K9F+0bQ4iXqQ5CRHLfBbdu44+VTm
TLSH	T1B1C533C6E37EE634F4602D6DD5FA81C9A26F509C9411A78A97D071F030D9DF623882BD
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

krypton.jar

Verdict:

Malicious activity

Analysis date:

2026-09-20 14:59:50 UTC

Tags:

silentnet stealer python evasion auto generic openssl tool arch-doc arch-scr

Link:

https://app.any.run/tasks/57aabd93-caa5-44b5-a87a-b540356f976d

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/87644/

Detection(s):

SecuriteInfo.com.Java.Agent.ADG.tr.7950.19179.UNOFFICIAL

Verdict:

Unknown

Threat level:

2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6aaff5f5891a2178aeaf76b6/reports/782ef070-b08b-46d6-a05d-0d8f19f6301f/overview

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f747505af5381cfe8aaa7e5d5840f74f53a94748d7d77cd98574ebb0f67231b7

Verdict:

Malicious

File Type:

jar

First seen:

2026-09-20T13:35:00Z UTC

Last seen:

2026-09-22T04:37:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/f747505af5381cfe8aaa7e5d5840f74f53a94748d7d77cd98574ebb0f67231b7/results?tab=lookup

Score:

Verdict:

Benign

File Type:

Result

Malware family:

n/a

Score:

3/10

Tags:

n/a

Link:

https://tria.ge/reports/260920-sfrqmaydqe/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/f747505af5381cfe8aaa7e5d5840f74f53a94748d7d77cd98574ebb0f67231b7

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	MULTI_Dropper_Unknown_GitHubObfuscated_JAR Create hunting rule
Author:	Marjoriefort
Description:	JAR dropper : classes obfusquees a noms random sous com/github/ (densite >= 4) - famille du resolver GitHub
Reference:	Veille glissante 2026-09-17_22 / grappe 21 JAR

Rule name:	MULTI_PUA_FabricMod_PackageIcon_LicenseGithub Create hunting rule
Author:	Marjoriefort
Description:	Mod Minecraft Fabric (structure package + LICENSE_github) soumis en masse - PUA/mods, pattern de soumission
Reference:	misses_archive / grappe 9 archives