weedhack | orchard(nitro)[.]jar

General

Target
orchard(nitro).jar
Size 8.6MB
Sample260920-alezxazyct
SHA256 a1292c10d963d0feba04825e43580b0a6b751c09b3cb50ba0b14c787f2cf9270
MD5 8c2dee40c2d284b8a64f1e373c887eab
SHA1 857cbbec5303bced174870007e57a0a299813728
SHA512 42e605562371f9d71ee258f36f1d8be7f9652c6201a00e4b2826ca55604a91c359bf8ce2dd8bb33d348ff2b377014472c1aa6db1fd980a803db68866843f0e08
SSDEEP 196608:Acslld1Tsldj5szDBZGdZ+KN7XVGd0OQdh341ZDcnuJD0t:UldTs6zVZGdZ+mVzdh34HcJt
TLSH
T1EC9633A2DD29813CD253B7305CD92D5BB89CDBB6C469A02F57B9099244C34CD0FEB2B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
orchard(nitro).jar

SHA256 a1292c10d963d0feba04825e43580b0a6b751c09b3cb50ba0b14c787f2cf9270
MD5 8c2dee40c2d284b8a64f1e373c887eab
SHA1 857cbbec5303bced174870007e57a0a299813728
SHA512 42e605562371f9d71ee258f36f1d8be7f9652c6201a00e4b2826ca55604a91c359bf8ce2dd8bb33d348ff2b377014472c1aa6db1fd980a803db68866843f0e08
SSDEEP 196608:Acslld1Tsldj5szDBZGdZ+KN7XVGd0OQdh341ZDcnuJD0t:UldTs6zVZGdZ+mVzdh34HcJt
TLSH
T1EC9633A2DD29813CD253B7305CD92D5BB89CDBB6C469A02F57B9099244C34CD0FEB2B6
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.