Analysis

  • custom tags

    obfuscationloaderstealerminecraft

General

  • Target
    Krypton++-New-Gen.jar
  • Size 20.8MB
  • Sample261016-vmfcaaae93
  • SHA256 56002b2bf21427afc8d603de500c4f38064e46dacdf9add9381015fdb306a2d0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SilentNet
  • Obfuscated class with Minecraft loader/stealer behavior 1 IoCs

    Detects SilentNet Java loader/stealer: char-arith decoding plus launcher, dropper, custom HTTPS/SNI client or session reflection

  • SilentNet is a stealer written in Java 1 IoCs
  • Java class with char-arithmetic string decoding 1 IoCs

    Detects Java bytecode with char-arithmetic string decoding (isub, i2c, castore/append)

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

File Explorer

  • Krypton++-New-Gen.jar
    .jar 20.8MB

Krypton++-New-Gen.jar

  • SHA256 56002b2bf21427afc8d603de500c4f38064e46dacdf9add9381015fdb306a2d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Obfuscated class with Minecraft loader/stealer behavior

    Detects SilentNet Java loader/stealer: char-arith decoding plus launcher, dropper, custom HTTPS/SNI client or session reflection

  • SilentNet is a stealer written in Java

  • Java class with char-arithmetic string decoding

    Detects Java bytecode with char-arithmetic string decoding (isub, i2c, castore/append)

  • Unsigned JAR

    Checks for missing JAR codesign signature.