weedhack | non-virgin-5[.]9[.]jar

General

Target
non-virgin-5.9.jar
Size 22.7MB
Sample260925-vbvb3asx4k
SHA256 3abcfe9c1a572d6334a9cc8bb5d69658d3b083e0d3ef328d05d31df77e8745f0
MD5 656f758f2cab5230a79e3efd3c7954d5
SHA1 8a0855431f64bdaba2b61799daa20eaf52b5a70d
SHA512 c9deb82f636a09b955069a35adcba53d3ef9b91c0e5e58a1397f0976e8eccd502cd6ea8206e6edbeee554bf7e3aa451fe9b877197a197c89821040d84383460b
SSDEEP 393216:kVbIOE/ClZAxQj+GWIUibkj4tDAxmSD+Z0lNkt0M/isW+qoqljZ6S8AHXJhF+CH:kw/ClZMQCGRLCUAMGNo03+xMjZeAHHH
TLSH
T115373387A45D582DC0A3E13F65390BA1DB2870A6AA4CFB9F7BB150C44C599A71F007FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
non-virgin-5.9.jar

SHA256 3abcfe9c1a572d6334a9cc8bb5d69658d3b083e0d3ef328d05d31df77e8745f0
MD5 656f758f2cab5230a79e3efd3c7954d5
SHA1 8a0855431f64bdaba2b61799daa20eaf52b5a70d
SHA512 c9deb82f636a09b955069a35adcba53d3ef9b91c0e5e58a1397f0976e8eccd502cd6ea8206e6edbeee554bf7e3aa451fe9b877197a197c89821040d84383460b
SSDEEP 393216:kVbIOE/ClZAxQj+GWIUibkj4tDAxmSD+Z0lNkt0M/isW+qoqljZ6S8AHXJhF+CH:kw/ClZMQCGRLCUAMGNo03+xMjZeAHHH
TLSH
T115373387A45D582DC0A3E13F65390BA1DB2870A6AA4CFB9F7BB150C44C599A71F007FE
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.