weedhack | modmenu-11[.]0[.]4[.]jar

General

Target
modmenu-11.0.4.jar
Size 2.0MB
Sample260620-be925sdy5v
SHA256 b1654c73baaf74d3742e93c9eb9be145b07a584751ea998a1b06b45407a8efd7
MD5 58fb38fd6de4bfa135efc6af9b804fd2
SHA1 5cb8eef8d90d911d0f0d9b83d2d3d2844835f681
SHA512 dc0a5441fdef2d5862e07cdab87bf2480e6090bcbe1a053195f45b8048eadf16f0be9055256eb54300f6e46799790f5d03cca0e7f39d3dbc942c3e0b9624f9da
SSDEEP 12288:izqXI2zWyIVSjhCKYevc8NxVX1jZXyN4OyhYflJGpsc0H7:aqY2zhHjhZjvDNx7jI1Jn
TLSH
T1E8A550564C322113A1E673B8A0CB072E36334F5746013D2917A747825A9DF7B9EEBE1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
modmenu-11.0.4.jar

SHA256 b1654c73baaf74d3742e93c9eb9be145b07a584751ea998a1b06b45407a8efd7
MD5 58fb38fd6de4bfa135efc6af9b804fd2
SHA1 5cb8eef8d90d911d0f0d9b83d2d3d2844835f681
SHA512 dc0a5441fdef2d5862e07cdab87bf2480e6090bcbe1a053195f45b8048eadf16f0be9055256eb54300f6e46799790f5d03cca0e7f39d3dbc942c3e0b9624f9da
SSDEEP 12288:izqXI2zWyIVSjhCKYevc8NxVX1jZXyN4OyhYflJGpsc0H7:aqY2zhHjhZjvDNx7jI1Jn
TLSH
T1E8A550564C322113A1E673B8A0CB072E36334F5746013D2917A747825A9DF7B9EEBE1E
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.