weedhack | lithium-fabric-mc1[.]21-0[.]13[.]11[.]jar

General

Target
lithium-fabric-mc1.21-0.13.11.jar
Size 1.5MB
Sample260620-bfazfady5w
SHA256 815d7ccf75e4b5b1e06ec1d0321c26d08ca5e5e7c7b78dbd41535ee8570e6d88
MD5 729cdebea61dd6fd142ff4b9e3e6b17c
SHA1 7bd53bcf2f4398fb8375cf78d12e7d4b70d04ba3
SHA512 e09073c56485761acf7682544e8f60166861d4632b3b571258f3888dcec5616dc5256bf15551289a52c01fa8df2e1ddd4cca0db03e67cc9d423af787d94ebb0e
SSDEEP 6144:0ldQYpIwWVOnKdya+p5fD3vOTmts+jDnkhUeSm+nrPeCaLm4U01ita6miohPCvol:0lVIwaEq+HD2TNWyioJC1CD27N29
TLSH
T1147561029197BAF2F65FF37F842E8211E630D672DE0612C776BC8D16BFC21C52692859
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
lithium-fabric-mc1.21-0.13.11.jar

SHA256 815d7ccf75e4b5b1e06ec1d0321c26d08ca5e5e7c7b78dbd41535ee8570e6d88
MD5 729cdebea61dd6fd142ff4b9e3e6b17c
SHA1 7bd53bcf2f4398fb8375cf78d12e7d4b70d04ba3
SHA512 e09073c56485761acf7682544e8f60166861d4632b3b571258f3888dcec5616dc5256bf15551289a52c01fa8df2e1ddd4cca0db03e67cc9d423af787d94ebb0e
SSDEEP 6144:0ldQYpIwWVOnKdya+p5fD3vOTmts+jDnkhUeSm+nrPeCaLm4U01ita6miohPCvol:0lVIwaEq+HD2TNWyioJC1CD27N29
TLSH
T1147561029197BAF2F65FF37F842E8211E630D672DE0612C776BC8D16BFC21C52692859
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.