weedhack | BetterF3-17[.]0[.]0-Fabric-1[.]21[.]11 (1)[.]jar

General

Target
BetterF3-17.0.0-Fabric-1.21.11 (1).jar
Size 8.4MB
Sample260922-txem3aad37
SHA256 a24c140e85623c3fd2fa20f5d741a110dac86d0ea9b3d79874a9c657e421ea61
MD5 daf6951afec70d6f413b78922322ea83
SHA1 5cb27a3d77c1b0c149d5d3e00e3da2ab74208a4c
SHA512 875488f80ca97475a68d8030a0c2be0b1d4ae25d871c36d9139c04e72161c5f5c2952166242cc713a4d63f2c170cf479cad7f01967075ae73d9943d6480738e0
SSDEEP 196608:Hsnldvrqld7IsLkZFGiZd2qaQOhplK8cauYya1:MnXrqfLAFGiZdpOv4auYh1
TLSH
T1039633BBE4DA5538D2B773309C971C03BC9CD66CD069A02E56B10D8684F39CD879B2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
BetterF3-17.0.0-Fabric-1.21.11 (1).jar

SHA256 a24c140e85623c3fd2fa20f5d741a110dac86d0ea9b3d79874a9c657e421ea61
MD5 daf6951afec70d6f413b78922322ea83
SHA1 5cb27a3d77c1b0c149d5d3e00e3da2ab74208a4c
SHA512 875488f80ca97475a68d8030a0c2be0b1d4ae25d871c36d9139c04e72161c5f5c2952166242cc713a4d63f2c170cf479cad7f01967075ae73d9943d6480738e0
SSDEEP 196608:Hsnldvrqld7IsLkZFGiZd2qaQOhplK8cauYya1:MnXrqfLAFGiZdpOv4auYh1
TLSH
T1039633BBE4DA5538D2B773309C971C03BC9CD66CD069A02E56B10D8684F39CD879B2B9
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.