weedhack | wynnextras-0[.]17[.]1-TEST2[.]jar

General

Target
wynnextras-0.17.1-TEST2.jar
Size 10.2MB
Sample260522-nn32eact4s
SHA256 aff9469c0325e049220a6ecd9429400b51cd70d88819e8e9b6e49f30dc5f4c23
MD5 6747dc2eec50a6d56755ec80334e22ef
SHA1 66201a481bf74a2f73259eb1ce0cef4a61150e8d
SHA512 cae0174144f626f80db015c35e97843ad026875730b1d3192b0fde09eef4b045711aabf8fa3cc7eeb89c02f153d6ba6b52716382ca41c31dd04fd46066f747cf
SSDEEP 196608:iTaVqXaQg6BzKMO9mJjXba63uBXTWClG9KYyY8FMjxh:CcyZRKx9mBG63QWeGymjD
TLSH
T1A1B62308FDD9C86ECB13D537410181E3F9940689BA49D0BF99648AA97DF0F5B0B42BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
wynnextras-0.17.1-TEST2.jar

SHA256 aff9469c0325e049220a6ecd9429400b51cd70d88819e8e9b6e49f30dc5f4c23
MD5 6747dc2eec50a6d56755ec80334e22ef
SHA1 66201a481bf74a2f73259eb1ce0cef4a61150e8d
SHA512 cae0174144f626f80db015c35e97843ad026875730b1d3192b0fde09eef4b045711aabf8fa3cc7eeb89c02f153d6ba6b52716382ca41c31dd04fd46066f747cf
SSDEEP 196608:iTaVqXaQg6BzKMO9mJjXba63uBXTWClG9KYyY8FMjxh:CcyZRKx9mBG63QWeGymjD
TLSH
T1A1B62308FDD9C86ECB13D537410181E3F9940689BA49D0BF99648AA97DF0F5B0B42BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.