weedhack | LiquidBounce-0[.]36[.]0[.]jar

General

Target
LiquidBounce-0.36.0.jar
Size 47.5MB
Sample260826-ej4mpssbkc
SHA256 d796d52d1dac63c8c14dbf70debf80fbe9fd3e3b8d80d00c8d59c8b7a484106a
MD5 623a291840ce23d77a5426030d765248
SHA1 fec4b8386de5da5bddeacf9aecac0c9f7828ed97
SHA512 e3ea88da1f0be40bdae5dfbc451cdea9ddc9cde834116d348834454743219c5858cbf03b136458ce8f5a8a2ffd527f213c8ed542673e0eddef08bce93ae9b370
SSDEEP 786432:4ifwnxaucQ9bADFdaZLyeoCE6t45G9dNsTUAI8jtn2IEe8dHD9L50lIMrHlBJvQH:FfwxYKbAFdmLye5EEcPrj8IydHt+drHO
TLSH
T1E0B72335A22D0A6AD70BE73BB51C241AFCFC4EE7D816515AF97C884F48D78CA098C635
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
LiquidBounce-0.36.0.jar

SHA256 d796d52d1dac63c8c14dbf70debf80fbe9fd3e3b8d80d00c8d59c8b7a484106a
MD5 623a291840ce23d77a5426030d765248
SHA1 fec4b8386de5da5bddeacf9aecac0c9f7828ed97
SHA512 e3ea88da1f0be40bdae5dfbc451cdea9ddc9cde834116d348834454743219c5858cbf03b136458ce8f5a8a2ffd527f213c8ed542673e0eddef08bce93ae9b370
SSDEEP 786432:4ifwnxaucQ9bADFdaZLyeoCE6t45G9dNsTUAI8jtn2IEe8dHD9L50lIMrHlBJvQH:FfwxYKbAFdmLye5EEcPrj8IydHt+drHO
TLSH
T1E0B72335A22D0A6AD70BE73BB51C241AFCFC4EE7D816515AF97C884F48D78CA098C635
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.