weedhack | BetterF3-11[.]0[.]1 (1)[.]jar

General

Target
BetterF3-11.0.1 (1).jar
Size 12.5MB
Sample260710-3z2eaafz4m
SHA256 402ed6fbdd1e232073333647168b2c597ad99cba7ecacd4a0e81a777f21282b8
MD5 b52b2482b6dd0dd755092dcecde0da6b
SHA1 e0a77f3fcdb04ae4aeaced34b9bcbc7ce9c5c878
SHA512 de502f519848da26edab979b18c8c1d2058524bbdbdc56fc380854a3f2bdd52acfa1fed74e9e9c63f5f04d68d14d3c8f89b596b5b8559fa535f3eafbdc07c7ad
SSDEEP 196608:0Osl6i03bCiAWUKOuPbmoLF+DZmIS1jTKrZ32924U3l2mB+2Y38dboIe:0OslYCiAWUEPgIzjTRY46l20Y3cg
TLSH
T153D63351FAA50972E0536A384D560A2221D8F283C812737FFBF245DE67298D5F397BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
BetterF3-11.0.1 (1).jar

SHA256 402ed6fbdd1e232073333647168b2c597ad99cba7ecacd4a0e81a777f21282b8
MD5 b52b2482b6dd0dd755092dcecde0da6b
SHA1 e0a77f3fcdb04ae4aeaced34b9bcbc7ce9c5c878
SHA512 de502f519848da26edab979b18c8c1d2058524bbdbdc56fc380854a3f2bdd52acfa1fed74e9e9c63f5f04d68d14d3c8f89b596b5b8559fa535f3eafbdc07c7ad
SSDEEP 196608:0Osl6i03bCiAWUKOuPbmoLF+DZmIS1jTKrZ32924U3l2mB+2Y38dboIe:0OslYCiAWUEPgIzjTRY46l20Y3cg
TLSH
T153D63351FAA50972E0536A384D560A2221D8F283C812737FFBF245DE67298D5F397BC8
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.