weedhack | TotemPopChams-1[.]0[.]11[.]21[.]11[.]jar

General

Target
TotemPopChams-1.0.11.21.11.jar
Size 8.5MB
Sample260930-t77ftsyv8l
SHA256 de150b38cd16b82ca531e088022993c33b3a2a35f5ec2489f3a95f615617d417
MD5 aa3338649bb50d6911e77e0c06e9af94
SHA1 d943082bc466cd3b35902de9429170868b87f704
SHA512 e392ae4f9276988f63cf1a191e8c33339ffdb576ad35e8e7155ff44ce41389e38e31faf5908cbf4ac5abeef0e7bd8ae6fa7502f8e969d85a8c27704e29b4cd62
SSDEEP 196608:ls1ldm7MldnNcsH44S8RtGSNrg27HlF2HSjnmE8:S1O7M1XrSQtGSdhT2HsmE8
TLSH
T16B9633A359A5163DD273B2308CAD1C03789DD7ACD4B8E05F6BBD0EA554E38C906E3279
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
TotemPopChams-1.0.11.21.11.jar

SHA256 de150b38cd16b82ca531e088022993c33b3a2a35f5ec2489f3a95f615617d417
MD5 aa3338649bb50d6911e77e0c06e9af94
SHA1 d943082bc466cd3b35902de9429170868b87f704
SHA512 e392ae4f9276988f63cf1a191e8c33339ffdb576ad35e8e7155ff44ce41389e38e31faf5908cbf4ac5abeef0e7bd8ae6fa7502f8e969d85a8c27704e29b4cd62
SSDEEP 196608:ls1ldm7MldnNcsH44S8RtGSNrg27HlF2HSjnmE8:S1O7M1XrSQtGSdhT2HsmE8
TLSH
T16B9633A359A5163DD273B2308CAD1C03789DD7ACD4B8E05F6BBD0EA554E38C906E3279
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.