🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fb4d7fbeffd1691859ffc4485f07328401a2ce1f2cc835f6ef1dd5424cb29555. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



SilentNet


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: fb4d7fbeffd1691859ffc4485f07328401a2ce1f2cc835f6ef1dd5424cb29555
SHA3-384 hash: 6d62c771ee4831a447334aeac609ae11d70015be4c32a8a98c4d3b7495e2cef6147f3c21eceaf83b7464723df571c6d3
SHA1 hash: 0a0948f953edb5b69c919783bf046153602d0359
MD5 hash: e9d26bfbee38b73a386654d09d613d81
humanhash: cola-shade-golf-hawaii
File name:QarzAddon.jar
Download: download sample
Signature SilentNet
File size:568'575 bytes
First seen:2026-09-16 14:09:56 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 12288:88nqLjiGv3UY7TymzhapSyfO3its7oDTS1:88nqfBv3nvxzcSiO5
TLSH T187C401107B369D2DD477A2B6F286E3E0DD6646F0CC02F02E07A594C276972B75B092AD
TrID 48.2% (.JAR) Java Archive (13500/1/2)
37.5% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3)
14.2% (.ZIP) ZIP compressed archive (4000/1)
Magika jar
Reporter wok
Tags:jar java Python SilentNet

Intelligence


File Origin
# of uploads :
1
# of downloads :
106
Origin country :
US US
Vendor Threat Intelligence
No detections
Malware family:
n/a
ID:
1
File name:
QarzAddon.jar
Verdict:
Malicious activity
Analysis date:
2026-09-16 14:07:28 UTC
Tags:
silentnet stealer python arch-exec arch-doc auto generic openssl tool

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Malicious
File Type:
jar
First seen:
2026-09-16T12:18:00Z UTC
Last seen:
2026-09-16T13:52:00Z UTC
Hits:
~10
Threat name:
ByteCode-JAVA.Trojan.Generic
Status:
Suspicious
First seen:
2026-09-14 04:01:18 UTC
File Type:
Binary (Archive)
Extracted files:
162
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

Java file jar fb4d7fbeffd1691859ffc4485f07328401a2ce1f2cc835f6ef1dd5424cb29555

(this sample)

  
Dropping
SilentNet
  
Delivery method
Distributed via web download

Comments