weedhack | meteor-client-1[.]21[.]4-42[.]jar

General

Target
meteor-client-1.21.4-42.jar
Size 4.6MB
Sample260930-evtxmswepf
SHA256 356a6ca99493c6b5b238f101675365114b75abc456919198dd6993084ebcf257
MD5 412493a22b719f5fdb6065a8c1d26452
SHA1 90ac0e507f883964ddcecef43e32d65f68456cc6
SHA512 2e8d3a29bacaf8d58c619cc942f3b6d1d4699c0912736b935f5045db615157dba169113b23819fcf7c59e28a7fd3a7f1ea2ab499c8405130d094ece0f0d7d7e5
SSDEEP 98304:Sk2SKrE1pK+ggsYTDbzZPxwF6WD3uR8yB6H0xsnn3fELD:n2KVHbJxwF6WDTH0xW3O
TLSH
T14236F125DE9D0036FC53EB328241E9A13CFEEE91530BB0763AB8051D49E7E898B7D615
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
meteor-client-1.21.4-42.jar

SHA256 356a6ca99493c6b5b238f101675365114b75abc456919198dd6993084ebcf257
MD5 412493a22b719f5fdb6065a8c1d26452
SHA1 90ac0e507f883964ddcecef43e32d65f68456cc6
SHA512 2e8d3a29bacaf8d58c619cc942f3b6d1d4699c0912736b935f5045db615157dba169113b23819fcf7c59e28a7fd3a7f1ea2ab499c8405130d094ece0f0d7d7e5
SSDEEP 98304:Sk2SKrE1pK+ggsYTDbzZPxwF6WD3uR8yB6H0xsnn3fELD:n2KVHbJxwF6WDTH0xW3O
TLSH
T14236F125DE9D0036FC53EB328241E9A13CFEEE91530BB0763AB8051D49E7E898B7D615
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.