weedhack | NexusAddon[.]jar

General

Target
NexusAddon.jar
Size 611KB
Sample260803-spzgtsbd64
SHA256 904443ecc9708c9aecdfc16ea131c78c3beecc5d2b468c4a5752b34819176d18
MD5 50d86c67a63e5f0475ab78c010a25e8a
SHA1 c31d9d52709146240910cc9d380a09575ba628a1
SHA512 d40e5c6d622b424d8dafa1a5c1af53ae748f16afb3985399891499e62dd62d9ac484770a060f38065ac90e61775215e15db082aba0cdd0fa859541a383e155e9
SSDEEP 12288:0wJA71fmEGvaTHnHEd+AwITxLJJkVZ/Dm0r7yn4vlY1bgFTNha6e697:Afznkd+ANTpsv7LvlY1b+6ZC
TLSH
T172D423A1434FD4F4EA4A68774C585696FB7C43D28409B02A0BF089A11CD98BBFF45FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
NexusAddon.jar

SHA256 904443ecc9708c9aecdfc16ea131c78c3beecc5d2b468c4a5752b34819176d18
MD5 50d86c67a63e5f0475ab78c010a25e8a
SHA1 c31d9d52709146240910cc9d380a09575ba628a1
SHA512 d40e5c6d622b424d8dafa1a5c1af53ae748f16afb3985399891499e62dd62d9ac484770a060f38065ac90e61775215e15db082aba0cdd0fa859541a383e155e9
SSDEEP 12288:0wJA71fmEGvaTHnHEd+AwITxLJJkVZ/Dm0r7yn4vlY1bgFTNha6e697:Afznkd+ANTpsv7LvlY1b+6ZC
TLSH
T172D423A1434FD4F4EA4A68774C585696FB7C43D28409B02A0BF089A11CD98BBFF45FB9
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.