weedhack | OpSec-1[.]21-1[.]21[.]1[.]jar

General

Target
OpSec-1.21-1.21.1.jar
Size 507KB
Sample260605-p6sttshs8r
SHA256 7392dd3a75d3123e3420910eb303cc8dcdc86079bcf5e05218e046cbf9a36728
MD5 141d0227575e3dab9ac1ae5f3073ffc7
SHA1 4b4572783475d0e69157373ced3bb1600c063377
SHA512 376d3dac373c2349365b647ebf8c4ae2d4a116e942d165712ee8dab59deee11b029204ca9e25ee9396e9400ef1a5f8ca0beb85d12d65383b8bf12f8966c230a5
SSDEEP 12288:ZE6mhdKeNJ2FTyxrvo9P6W0o0YtyWxaGWqOzBCw1W8Bnsm:ZUhUmJWqrw9iQ0YIS5W/z8VBm
TLSH
T114B4128B7ED7AA74E407E236F11255F3FD2C08849305652F2869984B9CA68E313777CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
OpSec-1.21-1.21.1.jar

SHA256 7392dd3a75d3123e3420910eb303cc8dcdc86079bcf5e05218e046cbf9a36728
MD5 141d0227575e3dab9ac1ae5f3073ffc7
SHA1 4b4572783475d0e69157373ced3bb1600c063377
SHA512 376d3dac373c2349365b647ebf8c4ae2d4a116e942d165712ee8dab59deee11b029204ca9e25ee9396e9400ef1a5f8ca0beb85d12d65383b8bf12f8966c230a5
SSDEEP 12288:ZE6mhdKeNJ2FTyxrvo9P6W0o0YtyWxaGWqOzBCw1W8Bnsm:ZUhUmJWqrw9iQ0YIS5W/z8VBm
TLSH
T114B4128B7ED7AA74E407E236F11255F3FD2C08849305652F2869984B9CA68E313777CE
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.