weedhack | LeaveThisGoBack-1[.]0[.]jar

General

Target
LeaveThisGoBack-1.0.jar
Size 8.3MB
Sample260918-swqs9sysgs
SHA256 f2f6c25b15993f5f68d39c7982bbf58ef2386b4f2a7ea0209f3cb075e16de756
MD5 c4620a3c793f0403ee1c3ddf0955d9b6
SHA1 9c971c3d0284f7f6dae160abfa80e788905c4da9
SHA512 cc07c2149abb07e6590f59f6cc2c133a77942c27941d8fb9ac664f55601f316b20db7871d7bd2d356b3bd6449fdf9b2ec82b316abb486fae0de0b92eca410212
SSDEEP 196608:Ls3ld/36ldfcsTAB1GaaJDcG165NiXWq642Qng:g3n36nTU1Ga04GIFlQng
TLSH
T1849633A31AD92538D2B373309C992D13B8FCDEEDC05E912E69B54DB544A34FB0A93235
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
LeaveThisGoBack-1.0.jar

SHA256 f2f6c25b15993f5f68d39c7982bbf58ef2386b4f2a7ea0209f3cb075e16de756
MD5 c4620a3c793f0403ee1c3ddf0955d9b6
SHA1 9c971c3d0284f7f6dae160abfa80e788905c4da9
SHA512 cc07c2149abb07e6590f59f6cc2c133a77942c27941d8fb9ac664f55601f316b20db7871d7bd2d356b3bd6449fdf9b2ec82b316abb486fae0de0b92eca410212
SSDEEP 196608:Ls3ld/36ldfcsTAB1GaaJDcG165NiXWq642Qng:g3n36nTU1Ga04GIFlQng
TLSH
T1849633A31AD92538D2B373309C992D13B8FCDEEDC05E912E69B54DB544A34FB0A93235
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.