weedhack | Xenon-v2[.]jar

General

Target
Xenon-v2.jar
Size 718KB
Sample260425-qtyd8aay21
SHA256 6732103930ed138e934935175aa438a146d95ea0fca7ec2faf830ba07ad0cec0
MD5 1dee9ed3ffef9906a17cec67f91996f2
SHA1 db65df70727a3432eaf72d0f3c8e17c87723eaef
SHA512 44de40e50fdd47eb228483198f2db446de7660421fca605d1284b51e85ded27ceabc4e6ae8154544ec73f1b745c24abec26599c1df6ddaaa0ce020c96fc31555
SSDEEP 12288:/GwtHaRknL+s3Afr1H3n6QVBz0x6A92vP3gI4lI29E+4qbYQWbEfw71PkZuUqvXK:JHskn3AxH3n6QTPXHivqQWKQ1mudXEZ
TLSH
T1AAF412ABFED1C1BEEE27813084159153B50CB1E8E806F83B1AE45D5E4970C5A1B1BEDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified2

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
Xenon-v2.jar

SHA256 6732103930ed138e934935175aa438a146d95ea0fca7ec2faf830ba07ad0cec0
MD5 1dee9ed3ffef9906a17cec67f91996f2
SHA1 db65df70727a3432eaf72d0f3c8e17c87723eaef
SHA512 44de40e50fdd47eb228483198f2db446de7660421fca605d1284b51e85ded27ceabc4e6ae8154544ec73f1b745c24abec26599c1df6ddaaa0ce020c96fc31555
SSDEEP 12288:/GwtHaRknL+s3Afr1H3n6QVBz0x6A92vP3gI4lI29E+4qbYQWbEfw71PkZuUqvXK:JHskn3AxH3n6QTPXHivqQWKQ1mudXEZ
TLSH
T1AAF412ABFED1C1BEEE27813084159153B50CB1E8E806F83B1AE45D5E4970C5A1B1BEDE
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.