weedhack | CheetoClient-1[.]21[.]11-v6[.]9[.]jar

General

Target
CheetoClient-1.21.11-v6.9.jar
Size 367KB
Sample260507-k3ncqaav4t
SHA256 b1fd667d9c259a0257dbc44c491b46bc8e83d549bbae7bb5352ba96bd588709b
MD5 9eb13291583b7700644ec402e212a204
SHA1 154fdd671350b218808973ed07c62ebbe333f7cd
SHA512 003f43893c68916f6ea0a6256cb14c9d1dfef0435e2cc9849fa7c6841824d8b78cbce1378a62b9500d00869e6237a9ee4dfa79576b3912cdd08bcaba119a2d5d
SSDEEP 3072:dVSkJ7keMBndDdKu8N3YViUJCjgskzyb7BaI+UZo8yZXMSpYE4VVp9r3:7SkJ4eMnDEuUCiRjP1aIJixuJEYVHr3
TLSH
T1EE848435E9DD87F8E383F2F125108A276456C6DCBD03F53748A858CA3E649E10ACADD6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
CheetoClient-1.21.11-v6.9.jar

SHA256 b1fd667d9c259a0257dbc44c491b46bc8e83d549bbae7bb5352ba96bd588709b
MD5 9eb13291583b7700644ec402e212a204
SHA1 154fdd671350b218808973ed07c62ebbe333f7cd
SHA512 003f43893c68916f6ea0a6256cb14c9d1dfef0435e2cc9849fa7c6841824d8b78cbce1378a62b9500d00869e6237a9ee4dfa79576b3912cdd08bcaba119a2d5d
SSDEEP 3072:dVSkJ7keMBndDdKu8N3YViUJCjgskzyb7BaI+UZo8yZXMSpYE4VVp9r3:7SkJ4eMnDEuUCiRjP1aIJixuJEYVHr3
TLSH
T1EE848435E9DD87F8E383F2F125108A276456C6DCBD03F53748A858CA3E649E10ACADD6
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.