weedhack | Crystal_Tweaks-1[.]21[.]1110[.]jar

General

Target
Crystal_Tweaks-1.21.1110.jar
Size 101KB
Sample260626-sd31wact3z
SHA256 c83eb759de73c57dcac12f61dba55a9b5f9b771f3e2f85a2eb309f4e9f809e85
MD5 7eb1c0466bc1ab15ef77624ee66db4e5
SHA1 ca3d3e69a7d159f5ac86099da9f090f520aae4d7
SHA512 eadc240703dc9d79290ce7beed69d5af42d4a958c4a4c3134278f60b3427c289f47cf616a154b7527eab561636d1788385b53cca33c1045613e1d5314b734e37
SSDEEP 1536:b9yqx2gzPsz6HGF4/P2RpttZ4d2L8eMZ0xRUwM87wgHRzOfFm84LTKqU+xmp:Jy22gzPRHGF4GVtKgdSWrRig8STKqa
TLSH
T1FDA3C01C3BE6C029E60BB33480214697EF195144E847F67BD6BC8D5D19E0D9B2F8AB89
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
Crystal_Tweaks-1.21.1110.jar

SHA256 c83eb759de73c57dcac12f61dba55a9b5f9b771f3e2f85a2eb309f4e9f809e85
MD5 7eb1c0466bc1ab15ef77624ee66db4e5
SHA1 ca3d3e69a7d159f5ac86099da9f090f520aae4d7
SHA512 eadc240703dc9d79290ce7beed69d5af42d4a958c4a4c3134278f60b3427c289f47cf616a154b7527eab561636d1788385b53cca33c1045613e1d5314b734e37
SSDEEP 1536:b9yqx2gzPsz6HGF4/P2RpttZ4d2L8eMZ0xRUwM87wgHRzOfFm84LTKqU+xmp:Jy22gzPRHGF4GVtKgdSWrRig8STKqa
TLSH
T1FDA3C01C3BE6C029E60BB33480214697EF195144E847F67BD6BC8D5D19E0D9B2F8AB89
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.