weedhack | Xenon-1[.]21[.]1[.]jar

General

Target
Xenon-1.21.1.jar
Size 448KB
Sample260601-1gr2sahs2m
SHA256 df687818b60dcbfb785b437877058aa2219158baa95983df88500b4950530712
MD5 38d1e2b304b302e6ea5d92a8d06de22d
SHA1 c4a70673b936381017e89b4ddea2b3e3db883861
SHA512 416a17bf2b8088da39f05dc8a02430e2c1748eab0bedfb1f3593d497a7bbeaf75832ec1e909ecc1c635b697346bfe60d3059de1dcc72aa6f25cd44a0009fe69c
SSDEEP 12288:4xsJhO0Ou/W5DKWa/wR4d52fC2vP3gI4lI2MTpD:4xsJ4u/jW7jftPXHft
TLSH
T1E8A4F115BCD1D479EE6F50784020B96FA82C14E8B503A723C9E4AC9E0D70D5B1B5BEEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
Xenon-1.21.1.jar

SHA256 df687818b60dcbfb785b437877058aa2219158baa95983df88500b4950530712
MD5 38d1e2b304b302e6ea5d92a8d06de22d
SHA1 c4a70673b936381017e89b4ddea2b3e3db883861
SHA512 416a17bf2b8088da39f05dc8a02430e2c1748eab0bedfb1f3593d497a7bbeaf75832ec1e909ecc1c635b697346bfe60d3059de1dcc72aa6f25cd44a0009fe69c
SSDEEP 12288:4xsJhO0Ou/W5DKWa/wR4d52fC2vP3gI4lI2MTpD:4xsJ4u/jW7jftPXHft
TLSH
T1E8A4F115BCD1D479EE6F50784020B96FA82C14E8B503A723C9E4AC9E0D70D5B1B5BEEE
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.