weedhack | smokexss-client-1[.]21[.]11-prestige-safe[.]jar

General

Target
smokexss-client-1.21.11-prestige-safe.jar
Size 6.1MB
Sample261001-qlpr4sxcpe
SHA256 fdcde755a1165f1a89d91d622020030e17c26d0ee2390674e7f24baa3885fd7e
MD5 101296c945c35746b5349732d9f0dea8
SHA1 e7379d93d8932ca040374e917068d33f6fa1cd95
SHA512 1bfe4062881c37b8eb72d7f42abfec94bf2c70aec7c5d0e3da2ca262a5129e85cb85a1026a5d4e09bb9e9b7b2dbb4f1e8f66bce422d268cbf0bc506dddcd1af8
SSDEEP 196608:WlSGZGGsAldildFsxZtG9EJTAJwD5VG2We:SSGZGxAq6rtTKwDvG2We
TLSH
T117563377A4184538D1B7B77D80B97C177C0D8AD091A6612A35B5F98F80EFCC94FE222A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

WeedHack RAT 1 IoCs

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

resource	yara_rule
sample	WeedHackUnified

Unsigned JAR 1 IoCs

Checks for missing JAR codesign signature.

resource
smokexss-client-1.21.11-prestige-safe.jar

SHA256 fdcde755a1165f1a89d91d622020030e17c26d0ee2390674e7f24baa3885fd7e
MD5 101296c945c35746b5349732d9f0dea8
SHA1 e7379d93d8932ca040374e917068d33f6fa1cd95
SHA512 1bfe4062881c37b8eb72d7f42abfec94bf2c70aec7c5d0e3da2ca262a5129e85cb85a1026a5d4e09bb9e9b7b2dbb4f1e8f66bce422d268cbf0bc506dddcd1af8
SSDEEP 196608:WlSGZGGsAldildFsxZtG9EJTAJwD5VG2We:SSGZGxAq6rtTKwDvG2We
TLSH
T117563377A4184538D1B7B77D80B97C177C0D8AD091A6612A35B5F98F80EFCC94FE222A
MD5 SHA1 SHA512 SSDEEP TLSH

WeedHack RAT

Minecraft Fabric Mod designed to steal session tokens, download and execute additional payloads, and persist via hidden mechanisms.

stealer rat trojan
Unsigned JAR

Checks for missing JAR codesign signature.