weedhack | wynnextras-0[.]18[.]0-TEST2[.]jar

General

Target
wynnextras-0.18.0-TEST2.jar
Size 10.5MB
Sample260628-tvtzzaas3y
SHA256 2ae8838b6c869ed2cea23d618715384f20eebb494d4cc68c25fc3e6224977397
MD5 8bb9d7191486ab3964a5838a379b6c6c
SHA1 9ebbd730546f5332cd766957454c3972a63063f0
SHA512 4330f7992483e4ae6bb9fca921c38a86e3ec068fb58658489b65829143669e93e371ae6fd2c3356b1fdfcaa505351fafbfc46ca87b1e34ad67dbe1b8ae22df2a
SSDEEP 196608:jTaVqXaQg6BzKMO9mJjXba639BXiWClG2FKxyCKaoxc:XcyZRKx9mBG63KWe9DPS
TLSH
T144B62358ECD5C86EC713D537410181E3ED940689BA49D0BF99748AAA3DF0F5B0B83ADE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
wynnextras-0.18.0-TEST2.jar

SHA256 2ae8838b6c869ed2cea23d618715384f20eebb494d4cc68c25fc3e6224977397
MD5 8bb9d7191486ab3964a5838a379b6c6c
SHA1 9ebbd730546f5332cd766957454c3972a63063f0
SHA512 4330f7992483e4ae6bb9fca921c38a86e3ec068fb58658489b65829143669e93e371ae6fd2c3356b1fdfcaa505351fafbfc46ca87b1e34ad67dbe1b8ae22df2a
SSDEEP 196608:jTaVqXaQg6BzKMO9mJjXba639BXiWClG2FKxyCKaoxc:XcyZRKx9mBG63KWe9DPS
TLSH
T144B62358ECD5C86EC713D537410181E3ED940689BA49D0BF99748AAA3DF0F5B0B83ADE
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.