weedhack | orchard-1[.]21[.]11[.]jar

General

Target
orchard-1.21.11.jar
Size 8.4MB
Sample260916-spdkcsbd85
SHA256 d7966e622ecdf96105f5754fb738ae0773d4653c2932cde59a2cdc88661be41d
MD5 b5c029fe4a09cee6b459474676e70e59
SHA1 c4859b031f4dcf91f5d4d7c1cd3caaabab7d8d70
SHA512 d96e2b2b3453d3c671c6af953399d59d469a014dbc1c6b5fe52c941c266e422c0a2ee11df1b8bfdc0ebbfab6bf20ff79e67c3e0b7f63fdd075c7e084fe47e921
SSDEEP 196608:IGsvldz5old0csxhhQGR7AGHTVdkDcLXvCo8eDoUPY3:8v75okxTQGdVTVdkDc74es
TLSH
T1EE963357BD998738D1836638788A9C13E9ADF16CD059D02F76B40DA684B3CC807936FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
orchard-1.21.11.jar

SHA256 d7966e622ecdf96105f5754fb738ae0773d4653c2932cde59a2cdc88661be41d
MD5 b5c029fe4a09cee6b459474676e70e59
SHA1 c4859b031f4dcf91f5d4d7c1cd3caaabab7d8d70
SHA512 d96e2b2b3453d3c671c6af953399d59d469a014dbc1c6b5fe52c941c266e422c0a2ee11df1b8bfdc0ebbfab6bf20ff79e67c3e0b7f63fdd075c7e084fe47e921
SSDEEP 196608:IGsvldz5old0csxhhQGR7AGHTVdkDcLXvCo8eDoUPY3:8v75okxTQGdVTVdkDc74es
TLSH
T1EE963357BD998738D1836638788A9C13E9ADF16CD059D02F76B40DA684B3CC807936FE
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.