MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SilentNet


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1
SHA3-384 hash: 5dbfb7a162cac9a16d4793a018ecf11ae411d841ec8346e4a228c17f1dfb5df0b5d527a3f1ad0e4118cffe5a47b40bee
SHA1 hash: c839e1fa3ac52bb4917a3bb98f6e37d235f1deb3
MD5 hash: a984eaebc707c733ac92f11f0826bbc4
humanhash: double-august-montana-may
File name:gypsyy-fabric-1.21.jar
Download: download sample
Signature SilentNet
Create hunting rule
File size:764'688 bytes
First seen:2026-06-17 18:22:37 UTC
Last seen:2026-06-17 18:22:57 UTC
File type:Java file jar
MIME type:application/zip
ssdeep 12288:Kk/nCnBtMl8yGVxy7qYR4KDdgaRQSFV14+XFnqs4fwsm3+T7nDmMi0YxkRtahons:Ka2BtFy6wDgaCi4+XlUfw5O/Drixytap
TLSH T1A9F4021510BEFEB4E0665636F44B4276DC2F6E8ECC0CE12F5978D5814A8B8ED6E7422C
TrID 77.1% (.JAR) Java Archive (13500/1/2)
22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter burger
Tags:jar SilentNet

Intelligence

File Origin
# of uploads :
2
# of downloads :
104
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
_fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1.zip
Verdict:
Malicious activity
Analysis date:
2026-06-17 18:30:39 UTC
Tags:
silentnet stealer
Link:
https://app.any.run/tasks/26a8ff3b-efb9-42ee-bf75-40e76a9a3e43

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/71105/
Verdict:
Clean
Score:
89.3%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a32e6321a97308eef89ed2b
Tags:
n/a
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
anti-debug expand lolbin obfuscated
Link:
https://www.filescan.io/uploads/6a32e6301d76d9ec9613a252/reports/185d353c-edae-4e52-ae74-fcb5436b7640/overview
Verdict:
Malicious
Labled as:
Java.Trojan.Generic
Link:
https://www.hybrid-analysis.com/sample/fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/1929584
Signature
Joe Sandbox ML detected suspicious sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1929584 Sample: gypsyy-fabric-1.21.jar Startdate: 17/06/2026 Architecture: WINDOWS Score: 52 12 Multi AV Scanner detection for submitted file 2->12 14 Joe Sandbox ML detected suspicious sample 2->14 6 cmd.exe 2 2->6         started        process3 process4 8 java.exe 3 6->8         started        10 conhost.exe 6->10         started       
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1/
Verdict:
Malicious
Threat:
Family.SILENTNET
Link:
https://tip.neiki.dev/file/fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1
Threat name:
ByteCode-JAVA.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-06-17 18:27:06 UTC
File Type:
Binary (Archive)
Extracted files:
300
AV detection:
3 of 36 (8.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=7j35y73wxnajmg7mpdb3wmjs7fhu63mlg7fk6jxwrrrsog4y3pqq._file
Result
Malware family:
silentnet
Create hunting rule
Score:
  10/10
Tags:
family:silentnet stealer
Link:
https://tria.ge/reports/260617-w1mh7aet31/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar fa77dc7f76bb40961bec78c3bb3132f94f4f6d8b37caaf26f68c63271b98dbe1

(this sample)

Cape
Cape
https://www.capesandbox.com/analysis/71105/
  
URLhaus
https://urlhaus.abuse.ch/url/3866629/
  
Delivery method
Distributed via web download

Comments