weedhack | Radium-1[.]21[.]1[.]jar

General

Target
Radium-1.21.1.jar
Size 2.1MB
Sample260708-mgfrvsft5l
SHA256 c6d15d80ddbc68e704fbffb046accd235574f68b717d1c9a77d7b24c242574f7
MD5 231cb23648ecb17ebc159029af8b4ee5
SHA1 f53cdc2651107f8938a59ea08a76d429976e6de3
SHA512 00f901eb2039912d93b5dfde9ddbc543041cdb344d06e27baa553dab3ef5aaae7675ba391a4eb63f6e2354b38da6dff30a87f285796cdae66ece5fdfdba83220
SSDEEP 49152:ikZDbO6MeIemlsKEVbcsjrhUf3XRy1m/HXICEH:i4DkeWnEVbtvQUgPX8H
TLSH
T1A9A51273F52C1439FD2BC675D506CF013EA859E4E31F701A2AF40E5A0897AE56B08F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper) 1 IoCs

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

resource	yara_rule
sample	Weedhack

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
Radium-1.21.1.jar

SHA256 c6d15d80ddbc68e704fbffb046accd235574f68b717d1c9a77d7b24c242574f7
MD5 231cb23648ecb17ebc159029af8b4ee5
SHA1 f53cdc2651107f8938a59ea08a76d429976e6de3
SHA512 00f901eb2039912d93b5dfde9ddbc543041cdb344d06e27baa553dab3ef5aaae7675ba391a4eb63f6e2354b38da6dff30a87f285796cdae66ece5fdfdba83220
SSDEEP 49152:ikZDbO6MeIemlsKEVbcsjrhUf3XRy1m/HXICEH:i4DkeWnEVbtvQUgPX8H
TLSH
T1A9A51273F52C1439FD2BC675D506CF013EA859E4E31F701A2AF40E5A0897AE56B08F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Detects the Weedhack RAT family (Minecraft Fabric stealer/dropper)

Minecraft Fabric mod that exfiltrates session tokens, downloads and executes payloads, and persists via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.