- First seen
- Last seen
THREAT SIGNALBenign
VirusSign assessment
Indicator overview
INDICATOR PROFILEThe reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
- SHA256
0491ca89f42de786de60a9ae37a0a734ff09f9d2f935da925dd8fa7bd063fae0- SHA1
1113773ac1f6da9ffbacaf96e97a6a83804475f9- MD5
377566b3f8471aabf7c83aaeb0f26258- Filename
- toolbox.svg
- File type
- svg
- MIME
- application/octet-stream
- File size
- 438
- Filename variants
- 2 reported
- TLSH
T1E2F055996028481EA434AD3DDA34707053CFB07FBE84700CC5E9762211012A8FAFB8CC- SSDEEP
6:tI9mc4slz1UA+9/nmqZlllSosUFWVdWLeaIfVhdQKhZlEYPtELANtTJQNqHnp8i:t4XUA+Nhlllv8aI1EY+WQNOx
Connected context
Key findings
OBSERVED EVIDENCEAnalysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
5 related indicators are shown across 1 relationship group(s). Additional relationship intelligence is available through API and data access.
Analysis signals
OBSERVEDEngine detections0%
Relationship context5 visible
Intelligence freshnessFresh
Expand a connection to run an additional public query. This page allows up to 3 expansions; each counts toward your query limit.
Graph filters
Saved investigations
Compare when indicators were first seen, last seen and observed. Switch to Lifecycle to connect events for the same IOC.
Commonalities
RELATIONSHIP CONSTELLATION
No observations in this view
Available evidence appears in the other investigation lenses.
SELECT A NODE TO EXPLORE
FILEDOMAINIPURL
Visible connections
Related intelligence
Pivot across connected files and infrastructure with analysis signals and supporting context.
Parent files
Files that may have delivered, loaded, or executed this indicator.
5shown
0%
zip
82512126 bytes
contains
Filename
67src.zip
File type
zip
MIME
application/zip
Size
82512126
SHA1
a455c1976b3fbbae077707c566a4d2acae7dc659
0%
zip
2313998 bytes
contains
Filename
67-CLIENT-SRC-FUCKED-BY-MITTKEE.zip
File type
zip
MIME
application/zip
Size
2313998
SHA1
5a48b083cbdef824d7d4d01a92ad67f63f1e711b
29%
high
jar
6886335 bytes
contains
Filename
horror.jar
Family
java
Type
trojan
File type
jar
MIME
application/java-archive
41%
high
jar
3588570 bytes
contains
Filename
67client (4).jar.disabled
Family
java
Type
trojan
File type
jar
MIME
application/java-archive
5%
high
jar
3589184 bytes
contains
Filename
67client-1.21.11 (1).jar
Family
java
Type
trojan
File type
jar
MIME
application/java-archive
Analysis details
svg
Freshness: Fresh · Last seen today.
- Detection rate
- 0%
- detection
- 0 · Engine detection rate; color may also reflect VirusSign confidence.
Overview
- SHA256
0491ca89f42de786de60a9ae37a0a734ff09f9d2f935da925dd8fa7bd063fae0- SHA1
1113773ac1f6da9ffbacaf96e97a6a83804475f9- MD5
377566b3f8471aabf7c83aaeb0f26258- Filename
- toolbox.svg
- File type
- svg
- MIME
- application/octet-stream
- File size
- 438
- TLSH
T1E2F055996028481EA434AD3DDA34707053CFB07FBE84700CC5E9762211012A8FAFB8CC- SSDEEP
6:tI9mc4slz1UA+9/nmqZlllSosUFWVdWLeaIfVhdQKhZlEYPtELANtTJQNqHnp8i:t4XUA+Nhlllv8aI1EY+WQNOx- First seen
- 2026-07-21T02:38:36Z
- Last seen
- 2026-11-12T00:00:58Z
- Filename variants
- 2 reported
Key findings
A focused interpretation of the evidence, relationships and observation history that matter most.
Analysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
5 related indicators are shown across 1 relationship group(s). Additional relationship intelligence is available through API and data access.
Observation timeline
6 timestamped observations are arranged from 2026-07-21 to 2026-08-28. These are observation or metadata times, not execution order.
Why this verdict
Review the reported detections, analysis confidence and supporting context.
The reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
1 relationship group(s) provide pivot and infrastructure context.
Last seen today.
Signals reflect the intelligence returned in this report. Missing values mean not reported, not zero. Related indicators are investigation leads, not proof of shared malicious activity.
File profile
summarySelected file intelligence summary.
- Filename
- toolbox.svg
- File type
- svg
- MIME
- application/octet-stream
- Size
- 438