weedhack | 22qqclient-1[.]0[.]0[.]jar

Reason

zip: checksum error

General

Target
22qqclient-1.0.0.jar
Size 515KB
Sample260702-msjynaew4n
SHA256 4e9af706336c3249970253719228692deffc5600384789fecf699afae528104b
MD5 b0ec1c74803d1d87a50cbc50f2e8f2b6
SHA1 b4a2c7dac3b5c63969cdd9ac27c594470c8aa338
SHA512 9bd747adb029dc25d9427cfe6dbfacafd055abc4255d4b4a72fd681501d3a32fce22bc4a65d56128a07c8885f47250f66c3c9c6b0e1267cf2dc93fe6e4a3b1cd
SSDEEP 6144:laiifwf6XYUxi6qUWE57o3AGpCy63ydEnaYYKiB0FZviqCZhzyiF/m:MYD8iJUlopdBEnabKHfvibhe5
TLSH
T195B4E1EBB9969DCFE50FE43B00818022B964E0DED44DF91F06B6019989A7DD83B15BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
22qqclient-1.0.0.jar

SHA256 4e9af706336c3249970253719228692deffc5600384789fecf699afae528104b
MD5 b0ec1c74803d1d87a50cbc50f2e8f2b6
SHA1 b4a2c7dac3b5c63969cdd9ac27c594470c8aa338
SHA512 9bd747adb029dc25d9427cfe6dbfacafd055abc4255d4b4a72fd681501d3a32fce22bc4a65d56128a07c8885f47250f66c3c9c6b0e1267cf2dc93fe6e4a3b1cd
SSDEEP 6144:laiifwf6XYUxi6qUWE57o3AGpCy63ydEnaYYKiB0FZviqCZhzyiF/m:MYD8iJUlopdBEnabKHfvibhe5
TLSH
T195B4E1EBB9969DCFE50FE43B00818022B964E0DED44DF91F06B6019989A7DD83B15BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.

zip: checksum error