weedhack | CrashAssistant-fabric-1[.]7[.]10-1[.]11[.]6[.]jar

General

Target
CrashAssistant-fabric-1.7.10-1.11.6.jar
Size 4.7MB
Sample260425-ebf7faev9t
SHA256 059642450bfca1b024f128367c057f9c38cb3013728ba864c9d0f4c5639f8c6f
MD5 935d0dc6e75b106b18e273cafcc31170
SHA1 974bf7ba0f9381713b46f0123291ab772a28ab05
SHA512 a7c0cd94ccd5a2e112f5d14c652c98e516d1b7a77c827d5ff51026d801f36c1a4fb585892b6420f52557dab758550cb84178b9dd9df2ce3ef71b427d762ac0c2
SSDEEP 98304:PgWpVomedCxfn392YgosYPFWlQ5o6K1Y97jDHUxKAR3HYSA:PJVje2n3pgo1PFWl2dn7f0PxG
TLSH
T1F9361222F5BFCD34CA67A27184982B137B5A339D950BF1AA71E42CC269F1C4E075D638
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified2

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
CrashAssistant-fabric-1.7.10-1.11.6.jar

SHA256 059642450bfca1b024f128367c057f9c38cb3013728ba864c9d0f4c5639f8c6f
MD5 935d0dc6e75b106b18e273cafcc31170
SHA1 974bf7ba0f9381713b46f0123291ab772a28ab05
SHA512 a7c0cd94ccd5a2e112f5d14c652c98e516d1b7a77c827d5ff51026d801f36c1a4fb585892b6420f52557dab758550cb84178b9dd9df2ce3ef71b427d762ac0c2
SSDEEP 98304:PgWpVomedCxfn392YgosYPFWlQ5o6K1Y97jDHUxKAR3HYSA:PJVje2n3pgo1PFWl2dn7f0PxG
TLSH
T1F9361222F5BFCD34CA67A27184982B137B5A339D950BF1AA71E42CC269F1C4E075D638
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.